{ "Event": { "published": true, "date": "2026-05-08", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-05-08", "timestamp": 1778285726, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "32d9c8fd-90f9-4559-bf33-e8985b01fd10", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1778205730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205730, "uuid": "ae488171-06cd-4856-aa41-af5560d863b0", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205730, "uuid": "9d1c98dd-c578-4d0b-b859-38e4fbcbf1b8", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205730, "uuid": "13114ff9-a40f-4d6b-a18b-ed4867e2e0cf", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205730, "uuid": "44858197-7026-4de0-98cb-8dfc8163abaf", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778205730, "uuid": "3f375e43-dcb1-4328-b607-b36abc9ae762", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1778265800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265800, "uuid": "23f54503-b0ec-4a19-8700-7cd89f6654ef", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265800, "uuid": "3c6ba1d5-67df-4339-af43-86954e94f5a1", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265800, "uuid": "9a71b01d-08c5-4d08-bb25-51327bb96b31", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265800, "uuid": "5bf3b4d1-c303-49e1-9df6-64c3616183ab", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778265800, "uuid": "6f0bb86f-91fc-4690-8ad7-50418cfb161f", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1778211922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211922, "uuid": "27251d95-a770-476a-863d-79f6d51accdc", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211922, "uuid": "c6c9b2a5-8b49-4704-95d7-501ae31a965b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211922, "uuid": "357bd32b-bcf0-4c8a-a047-a15a2e56df28", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211922, "uuid": "76c605e4-a42c-43e3-a733-6abb47be27fb", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778211922, "uuid": "81a0ab40-6568-466c-84a7-f2bd0a02267b", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1778219424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219424, "uuid": "94c5b5e3-2d2a-49d4-b50f-fcd71c360651", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219424, "uuid": "05cba073-b39f-4e34-b55e-fc23704dbe43", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219424, "uuid": "4c539fb9-fdd3-4fb7-9eed-d7f0fdb776e5", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219424, "uuid": "2eecef81-b142-4bce-b9bf-b462ed04edf6", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778219424, "uuid": "9fe35b1b-98dc-4ae2-aa9c-9da266dba4e5", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1778200998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200998, "uuid": "09f61195-3267-4875-acd5-d431c33553ce", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200998, "uuid": "24a10db7-d72a-4e62-87a4-b8267babda04", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200998, "uuid": "c906693b-a880-42e6-9dbe-297a1abf68d0", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200998, "uuid": "f5baebf1-d247-4438-8fb0-8c98e242238b", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778200998, "uuid": "a8267c42-de1c-4282-9147-0a9df503ff82", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c37d6c8-22a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1778227327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "8e15928d-767d-4412-8907-25ef5f348901", "comment": "Malware payload", "value": "f1705b79ff7e1bee779415c32a95fa76", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "5a1a9d81-815f-4be8-bd45-c341e2cfc71d", "comment": "Malware payload", "value": "cf9bc0a3e01a7b466bc35dbf88563adf61c884ad5fb2b28afd1298a5f723f370", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "77caccf3-d0ad-46b7-b431-e552221e7d17", "value": "T1E906E163EE9BC469EE6744B371C28242602A55B8AF0B90BE03D15DC54B73D8B0752F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "b6dc2567-9117-4435-8b48-bfb4cbb0f77d", "value": "98304:zLzEKRws9MEP+Zet2IxGG7CQW289MWndGleYj3VQGDBtM8rE:zLz39h2ZefoG9W28eWdISGD08rE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778227327, "uuid": "4815556a-8f8d-4695-9f70-18decdacaec4", "value": 3735240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "23f49345-04f8-49de-88b5-4ea10ce7710f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c0e4c6-26f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1778227330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227330, "uuid": "067c0b04-e44a-4d71-bb38-cce969a52ce5", "comment": "Malware payload (RustyStealer)", "value": "def4f909eeed327ab949d99a810ff64e", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227330, "uuid": "76b3389c-0694-4f52-98e0-e9b8d88193ed", "comment": "Malware payload (RustyStealer)", "value": "b9f71ed4b08c93a7fc5468bee23660e3129e1cf9c84100d4d40ad70fb7c851fa", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227330, "uuid": "41f14ad8-37d9-4edd-9b24-220d8cf768c6", "value": "T118765B53F66290ECC16DC1B4831A6632FB32B88A073476EB57D086213E66FD06B3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227330, "uuid": "6dfce00e-d8b2-4557-925e-08b29a9601ae", "value": "c6968d4f1c415fa3e43f6c6377cd6b0b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227330, "uuid": "b99a54dc-d46b-4fbf-9dfc-bcb802af475b", "value": "98304:0i3Qm0vuJyIvFbWMVqqLKYhebCtjlKSObn+:7CpQvK17", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778227330, "uuid": "fcdfc77c-8fea-4b2c-a6e1-87f408bb7e68", "value": 7608320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227330, "uuid": "afa0d7ff-fdfe-4102-865e-de39079075a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb80169-38c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (WeedHack)", "timestamp": 1778227331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227331, "uuid": "ee9f09b3-8f22-4e76-bd68-a340c7a84819", "comment": "Malware payload (WeedHack)", "value": "f622490a445cca999fcd1901ca83ec91", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227331, "uuid": "16505352-f874-48b7-b467-1338365b97d5", "comment": "Malware payload (WeedHack)", "value": "dba9908f63f5f32405f7a728f37979e743814532378cabc4f0e9f24c34197c60", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227331, "uuid": "16dee8c1-b24e-49ef-8453-d1a97aa564a1", "value": "T14686125A7D81DD29DB4B70B11691C4AF662907CAF015D01BCAA14D8A2C72F8E93C3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227331, "uuid": "13289e4e-9eb5-4c65-8e61-5c9ada9c0b07", "value": "196608:P/KhDTJBB3Bu6jXo66K5TzjHMdKr1vozCTOZrQV6az17/xZ66X:PeXrB3B7kHyHoKr1LKOVZbZvX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778227331, "uuid": "c2e262f9-3507-4352-8e02-de709012e532", "value": 8073801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227331, "uuid": "6b67b011-1170-43d5-99b1-5e7c94468fb7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98a1aedf-38f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (WeedHack)", "timestamp": 1778227327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "06f59506-091b-4de7-a1c3-680701ed3aa4", "comment": "Malware payload (WeedHack)", "value": "d10a619145bfd62a5f65584b4cbcd033", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "e103d488-f657-4acc-9efb-ac06f9ef1b55", "comment": "Malware payload (WeedHack)", "value": "14118a6070f89baafd5f2aeaf2df7535a8053f99944453584f0d1efeb6501ac3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "f2aec561-1eee-4c74-a83c-eb39136db2b5", "value": "T17284E0433AC45B12C1A44979D4F764300BE3F087B6BBD7492E99578A1E127FD8E4AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "1a57727f-ee6d-4f2f-859c-33e560f9d96f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "b48aae58-2ef7-4f32-8798-48c50fa0aa77", "value": "12288:N7UIuQDloSZh93j+6lwxzr/W11xFVc6By:2IxoQhtj+mazr/Ixzc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778227327, "uuid": "fe8b712f-4440-406e-af26-88a45c743a7c", "value": 396288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "42d21e21-03d2-4be6-84c0-242992fd8e8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "353fcf92-3924-11f1-bc00-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1778233268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233268, "uuid": "9bb8cea4-9a48-44ae-b861-5b3d05e1c342", "comment": "Malware payload (Stealc)", "value": "b1ed5ba271ab4cbb5a0c5121dfce2405", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233268, "uuid": "6584c585-bc05-4000-8753-f08446346687", "comment": "Malware payload (Stealc)", "value": "0215f734867bd71c57ff5c524d8cc670be5b4f1861b2c390cf46d18784a53624", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "34ba6d36-3f3c-40bf-b43e-4498097b7d6f", "value": "T17FF48D1EF7A612F8D0B7C274CA428952E77278465370978F03E15AAA5F372905F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "9ab19e06-4a1d-4d12-87a5-d9d9b37589ba", "value": "c5a49d74dbeba2b4cb56b327e236efe3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "287ac3d6-b507-47c7-9751-c07ac2a1af87", "value": "12288:TrHqQr5XgvVozsROaYzPIP17vMKrNhYyxBlDetAqxSv:nPgvVqsI0d70eXYyb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778233268, "uuid": "9ab4379b-ad2d-4d52-abff-5a87c21d5593", "value": 785920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "bb08857c-754e-4d52-91e4-e1a165fc873c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3015388-3cca-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1778243038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243038, "uuid": "457116de-4423-4bcd-a1ea-a524397aafe1", "comment": "Malware payload", "value": "1fb818df39c95e848f8ee0b59860018f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243038, "uuid": "a7f11de4-643d-4e56-aea8-72444946aaca", "comment": "Malware payload", "value": "b98b38421db78fce2eccdf24d78ed258c0db7377911ec4c6b53d7ed940983350", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243038, "uuid": "1d7c94fc-7a47-425c-83f6-058678e3627e", "value": "T1B2A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243038, "uuid": "b232dee7-d217-463b-9d8b-e9fd08eb7a3c", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT0:m0eF4xaDjDONijDG8ZxFT0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778243038, "uuid": "fb41b0e3-435e-492c-8338-e67b1940f09e", "value": 2151292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243038, "uuid": "26f63eac-2f7c-4007-97b6-3ac73de32180", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbb78b46-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1778236391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236391, "uuid": "fac12d3d-38db-441d-9daa-01cac268e7df", "comment": "Malware payload", "value": "9f35fd3bcbc01b097602dbd85d6ecfbb", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236391, "uuid": "12149b40-2fcb-41b5-baa7-38e14632fd77", "comment": "Malware payload", "value": "e55529c98f2fdc31a518d3da47802a68d7fe8ba3bde350ee2724acb6932bf3a6", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236391, "uuid": "421b306c-5c74-469c-a68c-7a50069b6b96", "value": "T140D56C6D2E4E58B2C3EE536199763F5DB674B3621D23681B26BD30C8CE212F53A07B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236391, "uuid": "e2e1cdad-1eaf-4c16-a0b6-9818a890a970", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGrvaD/B/oP3D0K:8UixbItdTrJoFVPMvXG7aDJE21V0Tb3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778236391, "uuid": "8f409bc8-1d81-4d49-a1ed-4b8fa103b6ed", "value": 2822993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236391, "uuid": "ae8c8600-313f-4ec6-a512-34a9658d8ae3", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "079ff58e-4a74-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778199762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199762, "uuid": "b4fdfa6f-240f-456d-a102-041267dc7a1d", "comment": "Malware payload", "value": "ef4a14f2e4e1a81829852a97541efc2a", "object_relation": "md5", "Tag": [ { "name": "254fce8d9c8b6dea2b15bd016dae84bb3b3ec8ef9972f1bffdfabd3af004", "colour": "#e3921a", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199762, "uuid": "a7ba9fb1-c1e4-4542-9218-c68edd41789b", "comment": "Malware payload", "value": "254fce8d9c8b6dea2b15bd016dae84bb3b3ec8ef9972f1bffdfabd3af004ca6f", "object_relation": "sha256", "Tag": [ { "name": "254fce8d9c8b6dea2b15bd016dae84bb3b3ec8ef9972f1bffdfabd3af004", "colour": "#e3921a", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199762, "uuid": "95193304-cab5-4338-8fe1-0b14e3f18284", "value": "T13C058CBB4372CE9A1F6D1FA49504068DAC68DC97E5EC03FC2F439CB582F55805868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199762, "uuid": "90c08a5e-b399-45a2-b19d-7307cd97c690", "value": "24576:opcmz+UioTFbTa83Cjyu67XiN+ZbCdf23s/q:ophn8iisB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778199762, "uuid": "8e8b6354-8880-4fda-a3bf-d8024b5db0db", "value": 866006, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199762, "uuid": "2be81d1c-e920-4780-a62b-a5f331130b65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "207d4640-4a74-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778199804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199804, "uuid": "12280579-f60c-4676-8b98-9c0eb8eddd90", "comment": "Malware payload", "value": "8773455dad8c608d74a26b2632044f40", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199804, "uuid": "1833b122-0a9a-4467-915c-bdbf280453bd", "comment": "Malware payload", "value": "a685b7f865b35dc45a0a37271cd7ee29725b04217903396676634849d9c0aa7a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199804, "uuid": "edf4b6b9-f0ad-47c3-85b8-5b3c55f3fb85", "value": "T17D242AA9350A0975DB57D5F8DE43A813EBB6BC464B25D5F70F83B8660E238E0B234D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199804, "uuid": "7a161eea-c8dc-4276-8fc6-00d4be69559b", "value": "91a3e19c6820e54afb733f4e653e2950", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199804, "uuid": "84d68802-f0d5-4037-8568-e0759bea1d2e", "value": "3072:AsJ9oshilKWR+2/UIUbag3/VJEl2lY5KDlAGNvLAVcun/qIraz/Y234:NJ9osGKWR4IWBv4lAl9RX/YS4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778199804, "uuid": "a81e8ac2-cdf6-40cd-86b2-4ca234af7b33", "value": 229376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199804, "uuid": "c9623343-53a9-4967-9180-c0a9bd3802d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ad1c116-4a77-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778201056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201056, "uuid": "b46c0c4b-f28f-4f01-aa0b-65c6147f01a9", "comment": "Malware payload", "value": "1ee0aa40657ebd887c09ad85e892b2d8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201056, "uuid": "923987fb-3d47-4342-aae9-06ce075efa0c", "comment": "Malware payload", "value": "2bcc2eeba3a89e58d94bf98d77ca1221cce7305e74b297c7d375dc4641904d15", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201056, "uuid": "dbf052af-0b30-4c01-a69d-8aaa5777b002", "value": "T18232C02444753DA96FFF48FC080CAD19858172FE0D6882F40EEC2969DAB7E4E95786", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201056, "uuid": "afaeaf96-43e5-4dd0-9812-a5a235796a4f", "value": "192:Xt7N4Z7jwrIFrcb5ewRKktzeJA6HRwNm6FMjeL0IcEHUcbsjuDYam1itkDuoUYRa:Xth4yrKckUKsgVHaUEQenUArFm1itfWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778201056, "uuid": "a456bf45-82af-4f9b-adcd-1e149137e225", "value": 11008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201056, "uuid": "478e4047-21ca-452c-8e07-bb38b9e2b96b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eea93a9-4a78-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778201546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201546, "uuid": "ad59ae68-8332-4af0-a7a7-80175135e18e", "comment": "Malware payload", "value": "036545d482efb7eb51c72be5568f5528", "object_relation": "md5", "Tag": [ { "name": "any.run-2cee1397-7d59-40f8-bccc-bbbafbb0ae5e", "colour": "#0b4b32", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "JSC", "colour": "#433330", "exportable": true, "hide_tag": false }, { "name": "nodeJS", "colour": "#e06bce", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201546, "uuid": "af686184-3256-4ba6-b196-7db2b5a0e05f", "comment": "Malware payload", "value": "dcd2165faca46e6270f5fef33eaf484bb12ad7cace15d1c6ef2d6352227a41e6", "object_relation": "sha256", "Tag": [ { "name": "any.run-2cee1397-7d59-40f8-bccc-bbbafbb0ae5e", "colour": "#0b4b32", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#21f8dc", "exportable": true, "hide_tag": false }, { "name": "JSC", "colour": "#433330", "exportable": true, "hide_tag": false }, { "name": "nodeJS", "colour": "#e06bce", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201546, "uuid": "824459b9-6c3d-4622-99df-af46ce6832f9", "value": "T11B4833FA5111C51BD2D1DAF8EDB0BFFC14B826B1ADC7C2A2F4B1115A3E6C7A4AD061", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201546, "uuid": "ac72aa3e-334d-4c33-8600-dc22fb138d91", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201546, "uuid": "cacf9ed0-c51b-4cdb-8fe2-eca7a8b17cdb", "value": "1572864:Q14YVmEcuTDBXhd1ecLR3c/Rs6HDQs5ben6Y0yPrunMqfX3z3vdOiIFy0t:Q141Enrd1e63Is6cYSB0ijqjvciIVt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778201546, "uuid": "aefc62d6-d9b4-4584-86b3-bf0accbb870d", "value": 116642904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201546, "uuid": "978ec114-7139-4e27-b57f-4ad5d6cacb1b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c91ef42b-4a99-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778215978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215978, "uuid": "7bbf5519-9c6e-4a4e-b4f9-cdbaa446a789", "comment": "Malware payload (Mirai)", "value": "63dd3701f460a1029c58b77381932a6c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215978, "uuid": "bcecc480-3d94-4d07-948b-d01fce8eeb7a", "comment": "Malware payload (Mirai)", "value": "61ffedae361262676d55fa789e65bce2abcd8490d19b4cf0669c23ad41da0017", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215978, "uuid": "acf16b56-8696-45d5-888e-69ee33588b3c", "value": "T176D3B021E4006DD1EC2129F578BA96BC0350EE700BDE1586EFFDE95E747BD98386D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215978, "uuid": "078df68a-9255-4b33-9503-78e241732408", "value": "3072:PHiBTNkAgcly+hoVpE6AKUjq+8biA7JBd/xG:PCdny+hovsmzbisJf0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778215978, "uuid": "c5ea7f7f-79e6-4abb-8a55-6020c75ed5cd", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215978, "uuid": "26d580a3-8e35-49db-83a1-d0c0b34f983b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2da20863-4aa2-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778219583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219583, "uuid": "28c825ba-d081-47d0-aac2-3ee13682dd52", "comment": "Malware payload (Mirai)", "value": "5b847f3a162bf7b3dbde9d3f8cef5285", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219583, "uuid": "e651096e-ffb4-4bbe-a995-df4d1e5647af", "comment": "Malware payload (Mirai)", "value": "9ef3b008a82d078940a2223751c1c9d8e32148711cf403e5d6efb82d7430311c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219583, "uuid": "07a4587a-ad29-4809-980a-0359d6efeb2f", "value": "T17E6301B872EB8474E0D9A532264F21207331E76AE47B53D92A89B59CF25259C0913E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219583, "uuid": "f145b490-5966-4099-8b5b-8923abb57bea", "value": "1536:hltrI7mDmde7Lletk8cghgLFPjihgulh6DoI1AOrPD:hl+YmdkLMk8c5PdulI1drPD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778219583, "uuid": "860b5b23-de26-468e-8dcf-f60494403ffb", "value": 70848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219583, "uuid": "5f6f51c6-7930-4490-90f9-6deca361441f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c236f9e-4aa2-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778219607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219607, "uuid": "954f6865-0bd4-45ad-9801-5949a7172ec0", "comment": "Malware payload", "value": "2a541000bcadc4fcfa46fe7a4e6122c5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219607, "uuid": "2a33b9e1-7fc9-42f9-bb80-68806b54662b", "comment": "Malware payload", "value": "60a49f507fd56382c8c9a4fbae256c60b6044bbaaf048b132f80bba4cfd3dc86", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219607, "uuid": "d89f9f71-a463-4bc0-bd95-318acf44adc3", "value": "T1B80401A333820AF76D77C55F7B1D88E9907DBF1003E120F19A9A6991D4A8767C0B5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219607, "uuid": "79db5e0f-97f9-4a70-b627-4c3d907480ce", "value": "3072:cFJFzSAM3pFeFxqERuxTvy33BsHhVG6gYwG+o:V3M8ca1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778219607, "uuid": "0f314262-effb-40e6-95a2-ebf546c1d1fc", "value": 175455, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219607, "uuid": "f086968a-b8b7-4375-b608-e9146ae76087", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab7b123a-4aa2-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778219794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219794, "uuid": "c96b3b1c-ffce-42a9-93a6-3f74a072d465", "comment": "Malware payload (Mirai)", "value": "e910f80d46ed09d6c74862ede2042130", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219794, "uuid": "6c0a18a3-5eda-4fb2-b937-4d9cadc5fc6f", "comment": "Malware payload (Mirai)", "value": "9a87db9dd846b6e4a5e7538a4d9aa8a0ce5f15e543da9aa01df80cd09e705746", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219794, "uuid": "c6d8979b-a504-4942-b560-07be5776bac9", "value": "T1FCB3E085B210AE55C02272FCB1870A90D3B16D7B4B9A150B4473F5B46DBCCD47E1BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219794, "uuid": "90649052-c049-4644-be53-8be6919bbfb8", "value": "3072:X5Apzl9NOvXoVLAE375lhYy5SkOXNwuz:aevXCLr59hmNwY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778219794, "uuid": "2d09d8fa-13ef-440b-873a-f6b98d347fc6", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219794, "uuid": "ea319923-3fb5-4174-91b4-bec700b4fdd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f67be42-4aa3-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778220150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220150, "uuid": "a2f62463-c9c2-4248-8c68-b58712120ab8", "comment": "Malware payload (Mirai)", "value": "496f850b952315922d102d1f9e9e032f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220150, "uuid": "14122a4a-3093-430e-80ce-b546d42dd646", "comment": "Malware payload (Mirai)", "value": "900fa056c8cbdfb7d6390c5557dfee104e2e8ec7ac43fcf37ded680499dcd1cf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220150, "uuid": "29bd8e09-649f-4067-ad3e-66c25b201486", "value": "T1FF53029111E5F429C56283F662008F06338ACA91BB06DDDC34CB132B6D9AE5F5F966", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220150, "uuid": "d50c6cd0-5a37-4bda-bde4-87c64c6bfb0b", "value": "1536:LznwRRM10ac1B010ZtaS4SV/zQUjsPwttl6CCELkg4azHH:XrREB5taUVLQlwtt0/ELGazHH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778220150, "uuid": "4072cb65-7e55-4804-b957-41b78845da95", "value": 60788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220150, "uuid": "b2149c63-c353-400e-b5e0-f5b936754046", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30b9f232-4aa4-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778220447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220447, "uuid": "4792810d-d74d-494b-a35b-200faf540532", "comment": "Malware payload", "value": "8034e0b986187264539768ac636916cc", "object_relation": "md5", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220447, "uuid": "6659d15a-ba30-43ce-9f40-f612860e33ad", "comment": "Malware payload", "value": "a76f3983ce6884f96851f4b448ea62be8a22758f0dfa46a3c602e42b77a2de0b", "object_relation": "sha256", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220447, "uuid": "d1a2ae27-4a5f-4d60-bb61-a7995a23869d", "value": "T19DE633CB8CCFF300E65A55B84DE27379AA30ED3C0A1E1B2F8A597755A698B3614C13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220447, "uuid": "ab6d43cb-e238-4b37-b810-9fdeaeef25d6", "value": "393216:bTtKqIUrLlsksqNof0ZmX5ekYHRmDMokQ7mQLuOBeUQmeKJrA:H6cLllRNUD5/YuMokQ79L3eUQUA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778220447, "uuid": "5dba59ea-6e9a-4633-bfb6-5431bcaa25d2", "value": 14789742, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220447, "uuid": "c31ac2b8-ea08-4b58-9207-0bb50a3093c3", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "243312a4-4aa5-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778220856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220856, "uuid": "c00bdbcc-ac62-4969-96b5-e7959ad069bd", "comment": "Malware payload (Mirai)", "value": "b44881084568ed539d7adcfdbb2531d4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220856, "uuid": "0dc1730a-ac75-419d-b556-f8ae5f2041dd", "comment": "Malware payload (Mirai)", "value": "89b60065bdc24667294ec0eea5a503a6efcff08dcced18ca68bbaac9783af91a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220856, "uuid": "f8e08fd2-83a7-4de8-a72a-6e301baff950", "value": "T1A3C3F185BB636991D0A342FDA4C00AC387912E318BA217480699F774387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220856, "uuid": "d94b422e-b501-4ed9-a1e9-5dbc9e6b6b39", "value": "3072:SBdQK+TG2nIjnRdZaUXUSgkLCCVwHWiEiBtbMMTn3:eMQRtXU9kLCP8ifbxTn3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778220856, "uuid": "a454f283-f5c5-47ba-be95-07f9a7f768d6", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220856, "uuid": "caef4e53-dc7f-40d1-b281-87a46fcb0801", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3da0aa17-4aa5-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778220898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220898, "uuid": "fbcf6609-7d25-4a35-ab18-8ccd9f20ce86", "comment": "Malware payload", "value": "4fbb3f9754fe8db9e98d6ede447de8bd", "object_relation": "md5", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220898, "uuid": "a177f97a-eaa4-49dc-91e4-2d22722f2e9f", "comment": "Malware payload", "value": "d85e8b0d7addc4bb850b61f3aea575ed8bd5615e1b888b26ff99452a2928b1ba", "object_relation": "sha256", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220898, "uuid": "62bcca87-9a4a-495b-bd08-10cb6ed61099", "value": "T1F3F633E30B506021C2A6E3B33B2A6D7D0337756326B46767B37EB805A88B4476F759", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220898, "uuid": "83d6d664-8fbd-4f0e-9cd4-12ebd7d0b174", "value": "a413ffcb413e398d1f798a0daa527855", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220898, "uuid": "3a01258a-fc06-40c8-8c1d-ce4f8a849f06", "value": "393216:Nku0nfQrU51SgUSAoEO3o3Jx/VJWQw4WXa:NZkQAtUYEO3o3JFVEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778220898, "uuid": "4ec4510c-c650-488b-9b5a-a9da098e0038", "value": 15327440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220898, "uuid": "387d229f-3237-4aad-be46-a3c08b6ac572", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c656a4e-4aa5-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778221057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221057, "uuid": "bed9d298-c167-4317-9bf0-7a2818422c63", "comment": "Malware payload (Mirai)", "value": "14f49fa4af0b1b8fd7aaf313bc4ff057", "object_relation": "md5", "Tag": [ { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221057, "uuid": "f93b7922-a490-43dd-819f-7e667ce5bbee", "comment": "Malware payload (Mirai)", "value": "e9577245851d84f5ad66544e17292c98678a91208829b1d83386be15cc08a8f8", "object_relation": "sha256", "Tag": [ { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221057, "uuid": "5a9c60d8-d346-483a-bb79-c8fd02318c56", "value": "T1DE6312EA963AAC1FDECC673859501379B085D3D1F3B7A80074CB858E975922FD11C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221057, "uuid": "0e6560ed-8866-440a-a582-f1ea02021de6", "value": "1536:VVUQ0TcrWCT3gcHB+cyepg1k/zJhw7nWAvnQGUgJViXZjb15iGhNe:np0T2WCbgc8bm/gCAv3Jwpjb9Ne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778221057, "uuid": "f401d07a-3cd4-45c0-8526-6bcce1118264", "value": 70428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221057, "uuid": "1f0edae1-402a-4c4a-b5cf-fc9e0edcfc82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e85962b-4aa7-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778221813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221813, "uuid": "f39a081d-cc74-4a5c-a978-fe447f452869", "comment": "Malware payload (Mirai)", "value": "d0bfe0eec55aa9da0e1dde9e8dd94f67", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221813, "uuid": "a1ec195a-4305-4d7b-853a-b0416e4f8cf7", "comment": "Malware payload (Mirai)", "value": "1b99806d49a6946c0599402ccd7ff662860bf3d17d55c7870da1cbb2e38da971", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221813, "uuid": "4b4fbd35-156a-4746-9138-46ed8dbbedbb", "value": "T10404392F258192F0F6411B746BCFD3976C390BBF41A9909F6B516329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221813, "uuid": "e6140762-960c-4f7f-9811-18c2149b1bd7", "value": "3072:7mflblbBDfvNUZem/LVA7bGQU66gOVNLddnNgRdgJi55wmUX9:7IJ5k1DVA2nDXNgEJi5azN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778221813, "uuid": "ac9bd48a-18da-4ec8-b95e-2f8bc7cb1f41", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221813, "uuid": "c9886c37-dae4-4d21-b708-9a88937f7557", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "062d8c4b-4aa9-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778222523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222523, "uuid": "688c0fe0-096d-40ea-ae06-a39573ceff8a", "comment": "Malware payload (Mirai)", "value": "c74385655907b94bd43058b6c3b636d7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222523, "uuid": "5f2f1ff2-7fde-4355-b794-30d8b09069c4", "comment": "Malware payload (Mirai)", "value": "4cd2dcf30071b0caf1ab3325b16450f3e5676a36095e56fe6c189f8a071ffa11", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222523, "uuid": "05f4d121-f4d5-45df-b7d7-19ab15a6d34c", "value": "T16C148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222523, "uuid": "081acc46-56dc-4985-8433-bd43217f1b52", "value": "3072:BcHZcggFy1tJmajThwnKBDMOzsjJjL1lCRTUKG:BcYFAJ9/hjzsdjyuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778222523, "uuid": "b80ccf0d-3002-4fbe-87ac-9651bcea2738", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222523, "uuid": "fd35d49a-1675-43dc-a0fd-a04054228669", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "135f78b5-4aaa-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778222975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222975, "uuid": "add71a30-59e1-459f-aba9-275d6d2268ea", "comment": "Malware payload (Mirai)", "value": "0f0d15b53ce9221a37f168b437b88df5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222975, "uuid": "c68a3355-bc20-4f6b-a7dd-12922916ec0d", "comment": "Malware payload (Mirai)", "value": "660324bfe99f25e3dec86988b6ed4d8b666e0343eb4aed0542e7d9a50a33655f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222975, "uuid": "9d41cd35-1e7f-4f4c-ae3c-376949803388", "value": "T154146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222975, "uuid": "e749ef8f-6712-4215-880d-4ab2cfa22850", "value": "6144:zNROm5155gL6mTX7zRR1Lwt8Al7IKTtW:XgLnLzt0ll7I7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778222975, "uuid": "26ed6e6d-58f3-4141-b2eb-fc6e076b87f9", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222975, "uuid": "784a955c-b42a-4145-8eb4-de9db8b36dbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3332983c-4aab-11f1-934f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778223458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223458, "uuid": "8e64bce5-6df8-4122-bd59-68f1a6ddbdad", "comment": "Malware payload (Mirai)", "value": "61281ca3281bc296a8538580a609b5ac", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223458, "uuid": "c21f4428-0a4e-4da2-9a6a-be8604bea73a", "comment": "Malware payload (Mirai)", "value": "88860bf777dc3bfe072137fbb4497881b42cc4abf58daa6e1d0075c78bc0e442", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223458, "uuid": "51eed018-5f18-4bc5-a4bc-656daca24d54", "value": "T179B3BF87B2907ABEF0A45E3FC4135E26A6259F705583273D71BDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223458, "uuid": "6d3bdbc5-d40c-4bd2-b9ca-12fc4c9d8694", "value": "1536:toOxCg+uUGWkCqYUqwaJ1XqfXg5AcS5blaZeCtjHXNLdCS2T15OvhSkzw8rSx:t1xKlGWnqTUcXgZS5gZ7CSXhSpUSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778223458, "uuid": "23c2dc88-4861-4cd9-aadd-46af56faba50", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223458, "uuid": "d66e21be-3160-4dc0-8249-ac874a82c593", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ed34213-4aab-11f1-934f-82aee05be84a", "comment": "Malware payload", "timestamp": 1778223558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223558, "uuid": "0da1c0c5-4388-4355-8aeb-a9efc360e0a8", "comment": "Malware payload", "value": "f624c6de3a39b50fa6af3753f623cb9a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223558, "uuid": "a1a7b15b-9950-41c4-9e24-06b906b668ce", "comment": "Malware payload", "value": "671d7880293ddf107635ae4f208ea0ef639d9f8e5292e310f58aa377762eadca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223558, "uuid": "33b2afa4-38af-4902-9a04-bc109a31798a", "value": "T17B34F114872D52D93FE827229EE8CD9FCF0B1441B4887BA1B1243FEC64154DDB4A7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223558, "uuid": "c318d45d-6c76-4992-99f1-8c2e45233520", "value": "6144:1cCJYHGFN3+pNc0S5IifxPTkS/PK6m/0KgldBQ2QWiWbzxco0aYY:9JYmqc0ytpT9z00KcbuWiW/aoWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778223558, "uuid": "4bc3321a-8bce-413a-81c9-16de0d34732f", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223558, "uuid": "559bd8e0-b280-44a4-93a6-f5448ef0b866", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "359ca87f-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778227327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "1dc3aa44-e157-4e62-a6e2-068c21f67954", "comment": "Malware payload", "value": "1c983ae44d4e31fb1a3dcaedcb5d462e", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "70f8bcd3-1d4e-4f37-8721-b197650680d6", "comment": "Malware payload", "value": "e7d1346153b49ce403687bbd0ddbf1db63de6808d64ea2812ea48ef0cfe7cf2a", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "b3db50ef-1e2d-43da-ace7-9a28bc661878", "value": "T1E86601927D9FCA29D95740B3D1E281A3682A32DFEA0ED03F46A00DC55E71D4A4352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "b6a4822e-510f-44b2-9a6a-07c1d1e12cec", "value": "98304:Ga/MuTQ5Q0wADytf2uqKNSaxdAjJNNhoZcAbiQj77UtxRAWdgfUEhH/Mz2nNqqFO:N2LDytfTpNr3xvbiGQvCmYVH/Mqstt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778227327, "uuid": "30866108-d636-4b9a-81a7-a2b3c3b24420", "value": 7064366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "3058fe28-71af-4536-b182-cbb53e939455", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35a0e21a-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778227327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "fc79bf1d-ed6d-437d-86da-72416d492263", "comment": "Malware payload", "value": "056ac5bc8dbb565c18a6e84123fc2dd6", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "8cd26c5a-7e50-4f8e-b14e-580361fbb5b4", "comment": "Malware payload", "value": "626be31d3cef61cfd19f0a86b474dd5aac0d5ea727d3ae13201a8c0502de3f7e", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "cb9e0837-0205-4a73-a7fd-cbc6e2a14edb", "value": "T1F3660213FD86E829E95740F361C2C1A3702A52D9E82AD02F4EA01DC57D71D6ACB52F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "ae5f4f18-13fc-4346-85bf-76deeebb1220", "value": "98304:SgnzL1Q5ijmxuW8Q+yKKgw+8UATNUfgQEM+shAkVMBFYRPndNyouhmyakVsb0H11:f2zuW8QHJghxtqsh582JdQlmu1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778227327, "uuid": "7294c054-8a82-43e7-b023-caf7708a8ab8", "value": 6884782, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227327, "uuid": "e3b5a4e3-cf53-45f2-b189-5f3876b664b0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79be3505-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware payload (SnappyClient)", "timestamp": 1778240798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240798, "uuid": "811a4c91-300f-4b19-af86-18f32a64c787", "comment": "Malware payload (SnappyClient)", "value": "37a15e9b892e87a9604ecaa39a1af60d", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240798, "uuid": "fff39584-bf0c-44a2-a961-85427a4783e5", "comment": "Malware payload (SnappyClient)", "value": "fcf308b939c6f31e5b1b459ff74927cf376646a9247c6827840c92a5b6087991", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240798, "uuid": "b935e3b7-17d1-417c-8de8-8b91c4d384f7", "value": "T15D76930A9F650640D4389034657F031226B83899BF751BDB21F9F3203E6FBE92676B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240798, "uuid": "9195c3e7-938a-42e1-9158-606f568bd5cf", "value": "83ba9ec796298e1559105b8a27bce5e4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240798, "uuid": "89ae99e7-2ffa-4869-bef0-7a095678bec2", "value": "49152:i++afgqiZMZQruwWnh8/XG05Ah3GcQCcZ+I4FXC8csqBkh33dy:i+ARPrM4XH3cmOUkhndy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240798, "uuid": "1e2a050f-5f32-4cb6-b665-401cdd536a07", "value": 7652864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240798, "uuid": "60a746d7-b021-4f54-9758-a467d4f29936", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93332852-4abd-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778231350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231350, "uuid": "faf7d10f-8e22-418b-a7be-dcd89291b819", "comment": "Malware payload", "value": "1b53aa4dcbd6785d106c113310d05b0b", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231350, "uuid": "908338f4-361d-4ca4-9f05-5deb04b49e4b", "comment": "Malware payload", "value": "cf85faacaf5b1506efe67d84864cc22ce45ad6d00d17ec3f84ee19abc6b20b2d", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778231350, "uuid": "6610a026-781b-4632-b116-4c5fabb6b92f", "value": "T17785331BCDDB20F480199BB87229915FA6E5C08F5384E5964384C1E9EBCDFAADE40E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778231350, "uuid": "d3a7e399-8210-4d14-8f3f-5734aecba3bc", "value": "49152:3HrTWvsR9A9UHrOXFrmSqOY7+RyQBvvliJ7:3HrTx9A9UHrS1p1RycI7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778231350, "uuid": "5fffaa6f-940b-4e64-8baf-2c9285b91ae7", "value": 1738047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778231350, "uuid": "f0edb46b-8acc-4f81-b8f7-0764d020ca7d", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ab2dd9e-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1778233268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233268, "uuid": "1d3ab23c-32b9-4082-8511-f4a6d86bdccb", "comment": "Malware payload (Stealc)", "value": "aa9bcf616ef6deb05fcabca604d2fe78", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233268, "uuid": "4f242f0c-82c4-4eda-abb4-7eaf6852f900", "comment": "Malware payload (Stealc)", "value": "534d6ab49abaab28a44512323fdf5439d505a7c6885be78a28bdf33acb059a59", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "bb86634a-cfce-4d53-9623-a86662a76e68", "value": "T1D0D4BF12B5909076E1734634CD68EB559B7DBC701B306BCB63C00AAA6E716C0AF37B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "9bc1c101-1b79-408c-ba68-5352bb58d736", "value": "8f6ac0a44c09cf34d118f91a2e956ac5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "edac5fbc-0621-444d-8aa1-5ecc159e535e", "value": "12288:gWNhzyF3k5KDwjtNG6EhSIz1Jd0yxBlDetAqxSvvfh0g:VNhHttc6EhzJ0ybnfh0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778233268, "uuid": "3578a99c-e6d4-4c95-a788-47cef855fda7", "value": 628736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233268, "uuid": "1d243690-b24f-4fdb-b708-4e363898d756", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "014c5b99-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778234112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234112, "uuid": "db3e3b00-ce2b-4b35-b27c-fcfaaa7f8cdb", "comment": "Malware payload", "value": "caec67a817c8e158feff923610827b3b", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234112, "uuid": "b7605d9c-aa6b-4ef0-b427-3f43a20eaa34", "comment": "Malware payload", "value": "44fad15243fd9a37900710a74454d847649b5c056fa091c12b9a78e41222cea9", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234112, "uuid": "2dc6bcaa-7d49-423a-b25f-4b6d06ad6cb0", "value": "T1F3B423090A7B3901F42E22FA35D39D213117E85FEC5E8E972EFBC24210DA959206F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234112, "uuid": "b1e0b1a9-d86c-4e28-abdb-adad9060c6e8", "value": "12288:2//THGTHhhvYgZLPBuM50LWCt50v9b2q39grcHoHgdXVd8e:K4h5YqLccfCtylb53ZfXAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778234112, "uuid": "dc9a3020-09ba-4a92-9575-6ed38e924def", "value": 521280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234112, "uuid": "0974e1f2-a5f2-4c2d-8916-7daf4cd7066e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "014d9021-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778234112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234112, "uuid": "b19a91d9-efa7-47b1-a527-20ccbeec7f73", "comment": "Malware payload", "value": "0427f03e3ca911c00b856232b35a11e8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234112, "uuid": "e6cfed03-e6de-4b6d-8306-8cbfdfcf613f", "comment": "Malware payload", "value": "9692bd9a1ea45d928e0c7f8dc5c1a2acf599ad4659d18be0a137d5f7d2d39603", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234112, "uuid": "18addf0a-f96c-4b0e-8d8a-5257fad41ddc", "value": "T198A489F1BBD861F25BAB581CA89EB469EDD6028FE2C533811105461D0E97BD7C9CBC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234112, "uuid": "5c9f49c7-b4c8-4d2b-a80f-b66eee1b0fb7", "value": "12288:OrkeXed+XH8+ortkHVUrhaVOsIFEASWtR+0Rag4KjVsF:FeXJCrt+UFi9IF2Ywb0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778234112, "uuid": "458154bb-a34e-4ce7-ae28-cfd64aa993d6", "value": 456084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234112, "uuid": "77150d4c-fa1a-493c-b5cc-ed85bfdf5a05", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1da11c7c-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778234589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234589, "uuid": "871c7e65-b37e-4859-8a1b-a82687a5902e", "comment": "Malware payload", "value": "b05405076403640a0f524d6f2f57d34e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234589, "uuid": "0230bc6b-f946-464c-aa0a-078a2997c4a8", "comment": "Malware payload", "value": "4e9d4700a9ce20b0ef84ebdb55266be2a78692a6b7ab87b0cefd0681032c281c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234589, "uuid": "9d0c02cf-ef17-4dfe-88ee-893bee1b0e8e", "value": "T1FA058CBB4372CE9A1F6D1FA49504068DAC68DC97E5EC03FC2F439C7582F55805868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234589, "uuid": "c86f3abf-5fa0-449f-a666-a0bf41e43252", "value": "24576:Epcmz+UioTFbTa83Cjyu67XiN+ZbCdf23s/i:Ephn8iisp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778234589, "uuid": "574f5cd6-e097-43c2-a8b5-948f1e7163a8", "value": 866004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234589, "uuid": "9590a5aa-5764-4e0a-b2dc-d86ee10c57ff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ebcd5fb-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778234590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234590, "uuid": "da37a475-d26f-4570-8c41-e5454237c2bf", "comment": "Malware payload", "value": "35591d2835fd8bceb986a0be7eff0448", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234590, "uuid": "5c01ac17-6235-4aa2-bd14-41b8269df54e", "comment": "Malware payload", "value": "10962ee931db85bb3ad20e516de1e1ed102ef4b42548bfb24421076caf1c7c5f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234590, "uuid": "3ada8e92-a57d-4139-a1cc-3aa59dc1d9ee", "value": "T17A057DBB4362DEAE1F6E1FA4D404068D9C68D8D7D5AC03BC2F43ACB542F55D09868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234590, "uuid": "e790336c-440f-4ca3-bd22-09b69326c687", "value": "24576:YpJKy8dh3MUqW94CkYYlwuqx2zG7hXWde6yCgtpgn:YTpt9lz+TS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778234590, "uuid": "22c3883f-942c-4f40-8325-fbc051b7913c", "value": 848240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234590, "uuid": "44bc815b-ae96-4bc8-95f3-b709ee4c96a4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e5f66f0-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778236388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236388, "uuid": "698648ab-b917-4dd7-bebc-45987e9a48ef", "comment": "Malware payload", "value": "57d5629344b38b78b7ff830aef417010", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236388, "uuid": "b03ba19a-9713-4282-99d0-e9172e1b8e0f", "comment": "Malware payload", "value": "a637ac579fdf610f376be7ac383e3b1290117dc0ba97872af91a5a36f5baa4b1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236388, "uuid": "5a199a87-c39f-4252-8eab-b1d717f17f9f", "value": "T1D0A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236388, "uuid": "70686389-1034-4870-841e-5be2be31ed6d", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTT:m0eF4xaDjDONijDG8ZxFTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778236388, "uuid": "9a0f8ebe-13d0-4084-bb45-508695861412", "value": 2151374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236388, "uuid": "3dfeb0bf-54de-480e-9b94-c669bd562833", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "522804a3-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778236395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236395, "uuid": "701846d5-abfb-49da-8fb2-d7da0291fcd9", "comment": "Malware payload", "value": "e3822a4b094cebf35a16c03d4b550258", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236395, "uuid": "3e9e4090-75d8-4157-a312-aeb6036e6353", "comment": "Malware payload", "value": "4b9dcff1b9c71ef6b851897b095d1b398aa93353c85b5997f017cb90f4bc3f1a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236395, "uuid": "105afc39-a5c5-454a-9a51-dbb41df0a863", "value": "T134A537E288B0FF17B7661D1863745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236395, "uuid": "5870151f-f155-4456-bf09-ab642f4d6a5f", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT8:m0eF4xaDjDONijDG8ZxFT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778236395, "uuid": "a31182e0-1eeb-4c9f-8ea7-332840b3d223", "value": 2151376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236395, "uuid": "f8da35cc-eea9-4632-ad11-f833f491c848", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7648e7c3-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778236455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236455, "uuid": "9b47cd0f-a17e-4902-8ef4-d9ad60a09d6b", "comment": "Malware payload", "value": "e779332a01324bb3b735ff3c61e13f51", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236455, "uuid": "fe93ae52-4118-4362-a762-4aafee777356", "comment": "Malware payload", "value": "8b90f636212776bb9afe0569709f4198adf60b15a1c68df3ceb4c76c886787a1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236455, "uuid": "c55a2be1-17bb-4f7d-9c6d-2c47355409cc", "value": "T144E55CA788B1EF12B7AA4E4833355E0D202467370FCF150E64BED7C9B692AA5341F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236455, "uuid": "8d9bb940-d00b-4f9d-ba9e-dfe5a78974ea", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTaEaptjotS:m0eF4xaDjDONijDG8ZxFTu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778236455, "uuid": "d904da2a-a632-449c-9101-d8b38b8cdb7f", "value": 3234004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236455, "uuid": "a490fd54-0fd8-47cc-9bd6-9bdafa942cb5", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a33ba81-4acd-11f1-ab73-82aee05be84a", "comment": "Malware payload (SnappyClient)", "timestamp": 1778242532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242532, "uuid": "386ed22f-47c2-4688-8c6a-49e19177008d", "comment": "Malware payload (SnappyClient)", "value": "e6e77c8b9bb9ab8fb0801abc5b6c4284", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242532, "uuid": "b1404f4d-92d7-4850-881c-e4136ce36455", "comment": "Malware payload (SnappyClient)", "value": "9b17471d781015895c8c3fb8ecdb4db47249a32ddbb910b8441e3297897b0da0", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242532, "uuid": "c0f87c3e-4dcd-4e01-befc-ef22d6c03de8", "value": "T11276B7069C764656C174D038987B142127F978C85B90ABCB7EDDB3242D8B7F426FA2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242532, "uuid": "7bb2fde8-a4a2-482a-ba7d-9e975d045586", "value": "170d5847fc2236d4b12875aa9c605807", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242532, "uuid": "fd184fa0-423a-4bc0-a970-b492550bdbb0", "value": "49152:bW50cLxvfBZmsdDfW7n6Orwww4NP8C0ETlevtrRyDw8cssPo5C:bW5ZmAVupFg1Oh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242532, "uuid": "f35d3b7f-dd91-43f0-a750-91f6aac860e8", "value": 7543808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242532, "uuid": "4f030da2-43a6-4e20-8e51-ec4e1ce95f0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec064d7e-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "749a9591-0627-473e-8f44-36b0cb9f6ec2", "comment": "Malware payload (Mirai)", "value": "5502527a899b1da8ceb60b7aa719c420", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "27f661e8-b6a0-40ae-940b-5388be68f04c", "comment": "Malware payload (Mirai)", "value": "2cae167abfd3b65acee1a0a82fed25236ea8fb844c4d01fce1d7d07302f01eb5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "0b60b9cf-5c04-4b6a-afd1-3c7f842b4fa8", "value": "T156433A86BD819A13C5D0227BFB5E028D372713E8D2EA3307DD266F21378A95B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "d25e4e99-c234-4fc2-b95c-a049992fe246", "value": "768:OmKvrCbJxkw68NlWYVaNPkkehciA4DM5VeOHifB+ul7V6rcv1IV:xKv+bz1WYVPkYE5oO8+uZocv1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "f69f7005-97b9-4c37-95e6-1d97f273ffae", "value": 56040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "eb63508b-6731-4c4c-b815-e46f4cf3a679", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec05b04a-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "89cdf372-9e5d-4218-b7a5-93a5ed46400f", "comment": "Malware payload (Mirai)", "value": "63a9ab7604aa4eee3b88c8647d7ecd58", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "c1ffa6cb-94d6-4978-acc8-60490f1f6736", "comment": "Malware payload (Mirai)", "value": "59411fe427ac4fefb8dd0ce16a880cc698a81f97565b73ebb6391ec3411736a2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "de32fb9a-0986-48d4-8245-2237c56f54b0", "value": "T1B2F01CD593B1F08388ECEF0CB4A2C861944866C7AD99152CECE87D1B5D81604B58BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "7f0759b7-1c49-440b-b869-def57e479002", "value": "12:Ff89cxye6f89iOHGmZjZf89wmcf89TEf8996x5epf895dmf89cb:N89cIn89Tndp894890890m89DS89E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "457aa2bc-cd0a-4b67-93e6-a2ac372342b2", "value": 446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "5a6575df-c479-4f68-99b9-d342a6f9dd01", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec08e755-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "be6e3a3c-220d-4ea9-9917-8d2ba05e0db4", "comment": "Malware payload (Mirai)", "value": "5e893cb16a82f37c1ef0e7ebb8896b5a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "526cc529-2953-4e5c-9808-f3712d531781", "comment": "Malware payload (Mirai)", "value": "fb2bc6c0886db9bea574e6636eb8d8678eb5a6d88d52d10d510b066a99b1c46a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "e0a3551b-5e87-40b8-901b-83d0981ba3e7", "value": "T16463C606FB614FB7DC6FDD374AB9170539CC550A22A43B7A7538C82CF64A60B46E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "f33bb260-d81f-4889-a2a3-8c38c0ae9f81", "value": "1536:pRQSTdCaa8daa9yV6DAbiL8DntxCISZAXdNKuAHFB:pR7TIaa4aaEtVS0aF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "ba274ea3-4f99-48fa-9164-b246ace9da75", "value": 72520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "5e3ee678-0aaa-4611-9997-7a28e25c7c21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec081be9-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "e3d0390d-6a93-427b-bce5-b0fd846c0332", "comment": "Malware payload (Mirai)", "value": "71cfbe25b1c4cbf05a8d685baf162d69", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "a5b4d8c4-4211-4d90-be9e-b7cf43cd5853", "comment": "Malware payload (Mirai)", "value": "8bc45e24e54d312bd46cc428c4cd2a9bb5487b8e42f0477ee1d735d25c992614", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "4418ffcb-c454-49cc-a769-31a7914f211c", "value": "T1DB83194AFC816B11E5D522BAFE5E028933535B6CE3EE72029D105F2533CAA5B0F779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "35267463-1039-4ff4-b508-36134824cd9c", "value": "1536:Dunq+raLOfKE2PagUuHzbSzxnP2lqli9Dj0PjovY7W6W:VLOfKE2PaNuHzbSnyDj0PjovV6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "a585071f-89c2-4460-bad9-62838d0e6731", "value": 81356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "4fd5d000-eea2-474e-8a80-f561a232972c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec08ad27-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "b1d2c110-4627-467e-a23d-e3ba35f8c022", "comment": "Malware payload (Mirai)", "value": "940b1dab889c917ec8b354428c593fe4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "d1d56851-7083-4512-ae3e-f59e89016827", "comment": "Malware payload (Mirai)", "value": "78669694bb85ac132bd9590543c8823c2cae86974c444ec05465ab3962b403a7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "957863e3-d7e7-4adb-97ed-51129aa48cd3", "value": "T12463C71A6E219FEDF7A9863487B34E21A79833C62BD1D684D29CD6005F7034D741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "95d56d41-35b3-48aa-bf7b-e150464f7001", "value": "768:7rp2peFqgTiMgZpvOd3hauUEa8jvWKQEoTh4/48qIgbJBSl6byoG5eLOmaYIjmyJ:BFFqxFz2jFoT2/44qBS/eXaYA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "8a01dd34-95a1-467b-b46c-54f59b43df5f", "value": 72520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "65d977a6-d650-4a4f-8d14-21d68dd121f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec095161-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "e9a1c5bf-651a-4fb5-8250-d7a38cc38e76", "comment": "Malware payload (Mirai)", "value": "f30140c4318d05f0c6463980abdbf1e3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "eb33bc29-ff68-4163-ae77-cd17c9d52714", "comment": "Malware payload (Mirai)", "value": "3348c9da39c981e258b53c644feb9962286384e25fe53718afca0d222ba86954", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "a30407a4-319b-4b4e-b366-7ac6dce3227a", "value": "T1E4236CC5DA43E8F5FC9701B51177B7339BB6E1290064EE63C358E532AE63601B62A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "bf166b15-1cc4-4e36-ae1e-95833b22a91e", "value": "768:ZlHXwYLwhXyL2uWBAHwkbTeJBJiFI3P4XWaqUmp6PIO73THOr3F7t7tnz1toYo8J:z3jwhyWBAHw8eLkFAWt3XPIize7rzLoA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "414bda12-d740-481b-9b76-ded34b222e3b", "value": 46672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "2c77bab1-719c-4a22-8e66-a19bc2a2792e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec143997-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "92869e75-da7e-4240-badb-20d6f433e99a", "comment": "Malware payload (Mirai)", "value": "c6c27187e4637789ec8fda438417215e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "0386ebb6-d5a0-4459-85fc-64a1a25b6d5b", "comment": "Malware payload (Mirai)", "value": "6e23e45f691ac1109d67a3218011856e23127c8f796a8bd865ece21852dd465f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "c262d533-ae89-4eae-8b1d-04f1c5108664", "value": "T12F631A4ABC819B12D5C5127AFE1E128E33231B7CE3DE73129E106F25778696B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "daf059af-f526-4f2e-b5fe-2d842b62f231", "value": "1536:AhnA5AKA1lGavDQ+jM6iMOA3EjqW7j5FYG:LA1kahOA3E2W7jLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238800, "uuid": "4c8cdd1b-108e-4f3a-acea-2b3b014a280b", "value": 66920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238800, "uuid": "119b8a63-2f6e-456c-af02-b976d2297071", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec1b3be4-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "4f2d161f-f145-4f66-90c6-5201ec323e1b", "comment": "Malware payload (Mirai)", "value": "5fa46d5e21a95b9f93e74e9aa86cdef5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "fca5c84c-b770-4828-a704-e08b7134b70f", "comment": "Malware payload (Mirai)", "value": "fc01d45219745ba0efd61791b4ba14fc2f92fad416cb9ec4eb92794f0d1315c3", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238801, "uuid": "5d76defb-e0f9-4f35-80c3-6818dc8cbf40", "value": "T1E9333A85BDC19A13C5D1227AFB5E028C772623A8D2EE3307ED266F11378695B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238801, "uuid": "032c2820-c6a3-45ea-95d7-eadfc1a553a2", "value": "768:NhSbD8bU8ww9GMVsNPke2aK0afMN+Vq58+21J6b1FK3I:PSbgbD9GMVxeUGN+km1wbm3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238801, "uuid": "250de719-35bb-4115-a64d-bebebede18a3", "value": 52968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238801, "uuid": "305837ae-f304-4b27-9985-055bd9f70266", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec2ac7e4-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778238801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "ea0480ed-287e-434b-983c-58d763694505", "comment": "Malware payload (Mirai)", "value": "ae51811c552766da5de819b5ba2812e3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-45", "colour": "#1bea05", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "fd8bf0a2-7c35-4afd-b90c-4bc8d6cf827a", "comment": "Malware payload (Mirai)", "value": "b5aa94a07ff2b7947cb8a29dd6168dc248460870857dd683ed7461f9c7c1af63", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-45", "colour": "#1bea05", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238801, "uuid": "5ca6b3de-83e4-4312-bc22-0fa0828423b9", "value": "T1AA14C80A3E228FEFF16D877147F34A31976966D627E29684E26CD5101F103CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238801, "uuid": "d31acd0b-25f8-4050-a63b-a93c0723d321", "value": "6144:bgyELyGsBkB/7KUZXfTXp06GtCqjYW8nY1j20WI:NEL9oUZvjp06GtCqjYW8nY1j20WI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778238801, "uuid": "e67346c7-9488-4d13-acb3-901ae494aa5d", "value": 202077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238801, "uuid": "ed308dc5-a060-4a90-9744-797ae0228b46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7871730a-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1778239036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239036, "uuid": "f6a6f0ce-1db0-4f48-a416-c9382023b690", "comment": "Malware payload (Gafgyt)", "value": "54de70f85faaf72cfd708283f20333bb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-167", "colour": "#4653f7", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239036, "uuid": "b2e77187-98b2-40a4-971c-1cf445ee116c", "comment": "Malware payload (Gafgyt)", "value": "4052a7001455d6fb59a310b2c3ef62230a6ce36d13d1b49ea9f542eddf2590b0", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-167", "colour": "#4653f7", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239036, "uuid": "ed6599bd-a541-4f52-ada8-27272eddb6cd", "value": "T1903161CE8491A06389AEEE0A7BB5E998A011C5D322DF2F5DDDCC2828C8DCD5DF125F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239036, "uuid": "69ae1451-c096-47c6-980d-d88bd22f90e3", "value": "48:SptypHApQ15pYfpE7pwrpnuhpzYPpE3pR+py8spXOjpWUz:SCWUAYSGmiaXsmR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778239036, "uuid": "8e407b1e-e02d-466c-b12d-960543f383bf", "value": 1672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239036, "uuid": "edc5630e-f7b5-4ee6-8369-4888cd294f72", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79aba223-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778239038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239038, "uuid": "676d487b-05bb-4e73-9a1e-63e803403dcd", "comment": "Malware payload (Mirai)", "value": "5d0acc37719e91653f447f6ac284f400", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239038, "uuid": "c3df89a5-7195-440f-b67c-54c4b7478b0d", "comment": "Malware payload (Mirai)", "value": "72343c8188de7346737727f6e9f3af99340dbdd1182dcafd1f50939cc8045624", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239038, "uuid": "d137606e-785a-4b4d-ab6e-0a02f01ed2d2", "value": "T15883F942BD429F13C5C225F6FBAF015D3B167B79D6EB3242E921BFA027864DB0D262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239038, "uuid": "fd801afa-4d82-4f1d-ad43-c5c7a8449741", "value": "1536:kBjWe2rADWC+4ukByg3qVMnlqRE0XS7Yo0qm9CVPMvRYJH0A/tvt0dhnb8GCdK/:kBjIO3qVMnlqREin9cPMvKJH0AcbNKK/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778239038, "uuid": "5b38e111-1833-44a6-97e5-241a013a615a", "value": 87824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239038, "uuid": "16ec8cdd-0a81-45a9-bf19-a72a303bb7d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0518a45c-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778239272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239272, "uuid": "92d65185-2cf0-4e71-a8f0-19669ee25a4e", "comment": "Malware payload", "value": "8af396318ff97aad299f5338b36e876b", "object_relation": "md5", "Tag": [ { "name": "pw-8874", "colour": "#814076", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239272, "uuid": "0d5583a3-5eea-4a50-8b1f-8b5abeb6d62c", "comment": "Malware payload", "value": "7ebcb7a2d5a2b12d477eec2c168d8581c0ebd4557863ccb35fde5699f5e09ba7", "object_relation": "sha256", "Tag": [ { "name": "pw-8874", "colour": "#814076", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239272, "uuid": "9e9313e4-a12c-4341-bfb2-0f5860000428", "value": "T142E6337C0FA11866338570B1D6E8132C6A4DFC56D6AF7AE70ED992C5A307023E2177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239272, "uuid": "bfd4f587-0289-4c46-9ff8-d1e08b7f19e7", "value": "393216:5j/43sk/tydmJit0urg2lxqfUmchupv6FDbqE5:5jg3sYyc80+OVUDeC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778239272, "uuid": "ff4fac67-66a0-4d81-9f5c-5a7b253a74a4", "value": 14688014, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239272, "uuid": "521b571e-685c-4eb9-9c8e-fe0332b8ccbc", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9eca30d9-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778240818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240818, "uuid": "c7e1d63f-cda3-4015-929c-7cf40a953cb0", "comment": "Malware payload", "value": "dd012c4db19389386f76b82a55260db7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240818, "uuid": "1dc5614c-9d79-4d47-9883-ac8e39ca780b", "comment": "Malware payload", "value": "4f675107416cd512d3f6120c34a6ea2c765a471db9d3c0d8cb30a7469b619cb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240818, "uuid": "eaaad2cc-b4fc-44be-98cc-fabaa821f797", "value": "T1B6D33A06B30C0947E1633EF43B3B27E193DFDA8125E4EA40651FAE8A9172D325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240818, "uuid": "7f71c399-7018-49aa-8981-23535b9cc032", "value": "1536:hJGxHeaefC/6cP9muYPlWoz3eYRofF086OvAtYQyMLdQtIs4Mh5rSw8UXHdSqU19:hJGx+mTY2fEHtYhIJAtHG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240818, "uuid": "eccbcff2-a8a3-4e55-acf1-278d4b6a0fad", "value": 133820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240818, "uuid": "ae90a7ff-aa20-4f09-9809-c93c23fd63fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ae8530-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778240902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240902, "uuid": "fd23dbf4-7780-4a66-b26f-fd5371819194", "comment": "Malware payload", "value": "2d140ecbaaf9d9b102e86a15f284f3a7", "object_relation": "md5", "Tag": [ { "name": "pw-2201", "colour": "#360366", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240902, "uuid": "09bb138e-f8a5-4a8d-8b5c-0f6f09140b69", "comment": "Malware payload", "value": "473de46d44fd04a8bac10273bbf0600fefa13a7f8bbea6e661f87afeeaf5310c", "object_relation": "sha256", "Tag": [ { "name": "pw-2201", "colour": "#360366", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240902, "uuid": "b2843c39-632f-46eb-8ca6-2d599bf2b4a9", "value": "T125E6338200980685DB8A0067F6DFDC02DA7453D08AFAB76772DEE5F2CB3F85478A53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240902, "uuid": "8ad8aebb-63e3-47d4-aabd-7c923ba51a73", "value": "393216:y5DDEBD6s+dLrWlfUKoswZqzvr2QLntfq124ZIqXF1F3Y:y5DYF6s2kBkqzvr2YqZ1nY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240902, "uuid": "537ea810-224a-47fe-aa70-bacd83b155b0", "value": 15096686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240902, "uuid": "877edf5b-381a-421e-922d-d84156f9595a", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d647a915-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778240911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240911, "uuid": "993f3b9e-712d-4a42-8dca-364e16f5cce1", "comment": "Malware payload (Mirai)", "value": "7df04758c1a9f37eede82c2e50cc0816", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240911, "uuid": "e1e751c1-87dc-4bd8-9a90-4cda3eae122b", "comment": "Malware payload (Mirai)", "value": "61050514ff65c96dec60f67e8a0aa2820dfe78701957465f9e031e25674286af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240911, "uuid": "2c3600ae-1236-45c4-91a4-3cb20b97989b", "value": "T1E3C3F845FD504B17CAC266BBFB4E438D7B2A1758D3EE720399256F30378B95A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240911, "uuid": "06060ce7-28cd-4493-a74b-bcb1aaa85f70", "value": "1536:Ypr0hMmaQLhOY2NsneLF7wfodT5XM8zGyxxvOllKkpSIf7pPlorwyw8t67h89wNE:EKaQ9OY2NsilwiFXM8RxQB8IT39sd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240911, "uuid": "f1209191-097f-415a-b0db-fc4f289172a5", "value": 129592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240911, "uuid": "2d5c40c0-e049-4115-b140-ff384e6c96f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da9598d3-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778240919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240919, "uuid": "9fcb25f6-2bbf-4913-bb10-16a3b65da862", "comment": "Malware payload", "value": "fb76f6c975942fa23658db4e6282119a", "object_relation": "md5", "Tag": [ { "name": "pw-8837", "colour": "#562240", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240919, "uuid": "ce33b1d0-4380-439e-af4a-7660247a9c10", "comment": "Malware payload", "value": "e294a5393be00d44a051e5c93e123b764150dd8b427a5daf284aad28e247b63e", "object_relation": "sha256", "Tag": [ { "name": "pw-8837", "colour": "#562240", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240919, "uuid": "2c01e62f-8825-413a-bbb0-5104f52bfa2c", "value": "T1E8F6330E8AC729E085DD27AFA933B85BD2713CED4DC806814A936DA4E7041F82DD5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240919, "uuid": "e8ff94b6-8af2-4013-906d-2c74b67fe0a1", "value": "393216:YDzLrQgMoblEZ8KYVamowPy+ID5FulEgLLTq5:YvLUgMw+ZtYUpX+IFE25", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240919, "uuid": "bb33bca8-0314-4f81-beeb-b87ca222c0bf", "value": 15294366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240919, "uuid": "f3e6470d-8e1f-47e9-b1a8-f2c2ba3dc138", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee9b0836-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778240952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240952, "uuid": "00156c9c-34eb-4f28-a7b4-afe433d58d03", "comment": "Malware payload", "value": "2e5bd9bd41de7227151be6d4728d5117", "object_relation": "md5", "Tag": [ { "name": "pw-6622", "colour": "#e2d8d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240952, "uuid": "b35694c5-249e-43fe-ae56-6ec57a33a896", "comment": "Malware payload", "value": "24797a7269ee2a823329d78a098d2df984698c99e1af5846f66a7fdf17f2b12e", "object_relation": "sha256", "Tag": [ { "name": "pw-6622", "colour": "#e2d8d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240952, "uuid": "b4738f38-17fb-46c2-9761-361cbdd8473b", "value": "T11AE6331DF971203CB26DBEC10DE07B8246A3DD44E1BD2DA4127B1E57B0D46A66332F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240952, "uuid": "ecb2ca90-004f-4d78-a7da-8904d6507e0f", "value": "393216:F8tZfA4zQMetGHVzS+jbmXfX7W7p1hViuoXwn8gyooGv:hMeM1znjbmXvS7pZoXwkooGv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240952, "uuid": "c686fd29-fe97-4f90-beeb-ec6eaafad89a", "value": 15034734, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240952, "uuid": "9ee96749-ce93-47aa-af42-d61247cdc38e", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb5adcb6-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778240974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240974, "uuid": "62b7a121-b9ae-4df5-8d01-eb22c0b14f55", "comment": "Malware payload (Mirai)", "value": "3a7d15116d45f5ac2c420b17a39c4a0a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240974, "uuid": "fd525935-7f25-4db3-a210-7ca0bbf12701", "comment": "Malware payload (Mirai)", "value": "d2f88f5f93dba410f0c748141485238c3d96229f17c4dec885bfc7d8c5b9762d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240974, "uuid": "23428a31-1d48-4847-b7f6-8f8a27957aaa", "value": "T1C433F1FBE332F1E6CB3A947959850146E4742D966A560FE782DB6DF44C333CD2E019", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240974, "uuid": "1f68161f-9b46-402f-b2ec-60d5ce33ebe0", "value": "768:Sm4ezg3OnSIdB6IG5CKY1nc+EPnde2MPVFn6cnh/LFmsxt3QkpsrvW/yc6DrXDdG:S3sg3FIT6IG5HYeTdA/6chftlpsq//iG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778240974, "uuid": "12f4f2bd-f484-42c9-9e00-51eb4427d22d", "value": 53892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240974, "uuid": "3c86e8ea-6b70-42be-a082-8bdf6298491b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42d1d77a-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778241093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241093, "uuid": "5e854bfd-51e7-4209-98f7-ac223e54175a", "comment": "Malware payload", "value": "fa854d26d626c7dedf8bf11f48a9097a", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241093, "uuid": "a17f87bc-06a9-4580-bc2a-f3ad5c2fca3b", "comment": "Malware payload", "value": "7c0f346c9215319aa2400ded21715ccc616c3b00e0c51f2da48290791cb3701d", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241093, "uuid": "d4c35318-4714-448e-a496-a467bb46d6de", "value": "T169860127FE86CA29D97744B352C28193652E12DDAC0F903F86A04D895A73D4A0F52F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241093, "uuid": "4cedf3bd-f7d6-40db-93c2-420454121ef2", "value": "196608:o1rTF2tcF/rmwWpbyLJVsGdXdbIKm2CmFPGF:oVJ2tq/iwWkdCyfmGPk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241093, "uuid": "a8c98cda-d9df-4ff5-9c90-d320b23cb525", "value": 8281478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241093, "uuid": "51218195-6b24-4b6a-92a3-dc25b2da6667", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9eef7846-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778241248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241248, "uuid": "29b7b69a-8fb2-4e18-b468-9ab3304ddd5d", "comment": "Malware payload", "value": "04aa1916a103c8d0f45bdebfdbb82735", "object_relation": "md5", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241248, "uuid": "3865c8ef-aec7-4380-81da-fbd1a4a98072", "comment": "Malware payload", "value": "3b10d5e0719ae640b969686abc36c53a2955bb73ccdf5dc68c0e5be8c8f94b4a", "object_relation": "sha256", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241248, "uuid": "4d1c4b93-5a5d-4dca-93e4-090223380f8c", "value": "T199F63395CA14AF4090AE307498D7314B6F3F169BD9B612FA31DEB6A4B27FC8133D08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241248, "uuid": "03567ad7-213e-4096-a49a-295b582fd064", "value": "393216:Nb7Q8U/QiOXFItfg1aOvrJSqMMXJW90C/FKl96++ycl6496Ae7yDvxI8YJjCwcOX:lQ8U4iGMeTNweJ80C/g0yc8zo5e3cO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241248, "uuid": "72c622d6-dc4f-4e34-8b00-27f04dafaff5", "value": 15493358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241248, "uuid": "71c2f04f-c42e-4838-811b-aa4e33c406f8", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4b515af-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778241285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241285, "uuid": "07f5d9a8-694e-4857-b240-cabd58fe23b6", "comment": "Malware payload (Mirai)", "value": "26a58a2fa61c253321f10c786a48e959", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241285, "uuid": "fa192ed7-6910-4db0-8330-0873c4948815", "comment": "Malware payload (Mirai)", "value": "2ef71ffa6b038ba342552a0b21e741b6894a29f1205542cfaa384e4efcdd1ec6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241285, "uuid": "0f6975e1-06ca-4ff2-889b-a3c0a581c480", "value": "T1F2D3F945F8509F27CAC255BBFB4E438D7B2A176CE2EE720399255F30378B9560E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241285, "uuid": "1d422af1-aa33-4bd2-be76-eec681daf085", "value": "1536:NJoY1lFVW6XOZgnVxUzF3I5+wfDxTYZThZ/xvOkBTHzAEtBxOlLnwywInOdubP3g:NJVl26XOZgzUxIwwVEZ7/nDzdvwUnt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241285, "uuid": "782e56ac-732d-4cd9-a798-08de347b2e1c", "value": 133688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241285, "uuid": "5d94d45c-1b38-4038-8456-7f05600b02bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e20859a-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778241435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241435, "uuid": "81cc5b96-7f47-4ae8-80f0-9e365a8ced5c", "comment": "Malware payload", "value": "d42340667999869a1918ad90dad75779", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241435, "uuid": "84236695-ba4e-4c99-a080-551aabb778de", "comment": "Malware payload", "value": "0d07fcbf99ad378b9185e07c0eef8986b49b8e7ac12662109d3b1e12a8e63202", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241435, "uuid": "130237ea-340b-40bb-a363-31c3a0b7a890", "value": "T18AA5F11CE1436E33C927B2BD74B3524ADF15B04321986DD6A4C259282F4AA347F3A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241435, "uuid": "af94158d-3edb-47d9-8968-36944d632013", "value": "49152:G2FlC7n9ieG3yTXJ80P+uLvWCb0yHSrBXuTAI3:boAk8028tl+MTAI3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241435, "uuid": "8f5b4cb1-4d9e-472e-bec6-1cd4212ba91e", "value": 2156824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241435, "uuid": "69054709-cdef-4ea3-9ca3-c8fe5cca8843", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e973364-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778241435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241435, "uuid": "2b18b440-cad2-43d3-8c1d-3baa94f0d6ff", "comment": "Malware payload", "value": "83bf51bd93b6db1b112f6ad8c45241b4", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241435, "uuid": "416cab7d-956d-4d38-9dcf-175832396d28", "comment": "Malware payload", "value": "050d4043af02c7cfaf00f257f28e8c8313f6f444c843def486fc2141d379da49", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241435, "uuid": "79f3d16f-b17c-480d-805a-10e1793825f9", "value": "T1652633B284137CDCDEBB2A32D8043EA60C2E57E37B51959EB8C46B5178D3554EEA81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241435, "uuid": "cfd83490-fb59-4e89-bc36-a3bc8525f8eb", "value": "98304:8DwvLu3hIJofI3PlyLErLXfiGPd1YBJO1XXKVntIW9S6JzW+zhsVm7J:hLuxjicWV6BE569UcNJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241435, "uuid": "7d293e61-8145-45a7-a883-f9c493778c7a", "value": 4762496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241435, "uuid": "5bfcbb9c-8d2a-4236-a287-53dc0f26b773", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35b1673a-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778241930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241930, "uuid": "88c3b513-309a-49cf-bba5-bbba50f1a50a", "comment": "Malware payload (Mirai)", "value": "30e9b44e7e501634f991ddefef35b0d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241930, "uuid": "1e5cdcc4-1715-482c-89bb-0c42ec0f3444", "comment": "Malware payload (Mirai)", "value": "a98a247bef89e0e9a5c4206782f6b1544de23568c07deb3735468ecefb19fde3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241930, "uuid": "79be1731-6e10-4b95-beeb-b94aa0a57e4c", "value": "T18DC30649ED416B01D9D635FEFA4F028973530B6CE3FE7202AA245B3523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241930, "uuid": "263d1c3c-0af7-48b8-8548-d99167253775", "value": "3072:1TRJCRWRGXxgLRrxcb+avtRJTsAueJZsdmnkc2diPh:dRJCYUhgLRFg+av3JTsAuIqmkc2diPh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241930, "uuid": "91e922e8-7b80-4211-baab-14ad29923552", "value": 118580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241930, "uuid": "a1c92742-9a81-4997-8374-92c26ad6b610", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58a42d5e-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778241989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241989, "uuid": "65d739bf-15c8-454c-bf21-1c84a224fc8e", "comment": "Malware payload (Mirai)", "value": "fb751c0e2689b2321c81f279ae22a3d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241989, "uuid": "b98e045e-9435-4de6-affa-13f530c8b4a5", "comment": "Malware payload (Mirai)", "value": "411197314669d9d769e8acb399dc438e32b53ee3915b341512a37273218c9482", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241989, "uuid": "f7f83c5e-4eb4-47e7-8568-888aeb691b40", "value": "T180045BA9BA0F6C41F2C2D3F9DE4C87E13E1735E3C7768971781212EDCAA39D95A905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241989, "uuid": "0be1f4c3-470e-4d72-98b7-f344bc85053e", "value": "3072:sN1nrb4BJ0SmTyNjUF9BH5+w67z/g3CVJi4MskdPoq:g1nr0BCSmTAAbBZ+57zoAi4XaPoq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778241989, "uuid": "9a30d5f3-be77-470a-a308-8c9b94a18866", "value": 186352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241989, "uuid": "82bbb6e2-ecf2-420a-9691-3ae316a9b01d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed97e675-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242239, "uuid": "374f3a4f-d0ba-475a-a131-df7828335be9", "comment": "Malware payload", "value": "bee4363e0880a713eb2b8d2c71d4478e", "object_relation": "md5", "Tag": [ { "name": "pw-7744", "colour": "#46695f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242239, "uuid": "7e3c38e7-c2df-4466-82bc-a9b2e8a4e3ca", "comment": "Malware payload", "value": "a44b144c5841373fa58399c3847b4fa9e6e3dcd182898cc83af5076290e67cf0", "object_relation": "sha256", "Tag": [ { "name": "pw-7744", "colour": "#46695f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242239, "uuid": "05e269da-e1f1-4cad-8ddf-171bb8695b8c", "value": "T1B2E6335AB2036C5BC34EF08D349636CA5E94B5FFA4B22A8DD45479F001D96284AF70", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242239, "uuid": "28a7f2ac-7c4e-4814-8181-e138800b9cf3", "value": "393216:fIwmSPDEQbBEmjjCz0MMraTHhIlujVnCoJ8:fIKPwSRj40M/THhYz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242239, "uuid": "a91d44ce-48b5-437f-9926-d0e639024d56", "value": 14869070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242239, "uuid": "7b95aab6-f569-4395-95d6-188294882adb", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f4470f4-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload (RemusStealer)", "timestamp": 1778242430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242430, "uuid": "190fa243-0269-49b2-8405-4be6bebe8cd6", "comment": "Malware payload (RemusStealer)", "value": "89db7f30b990df6be281ef43c6baeb31", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242430, "uuid": "c4b795cc-150d-479e-8256-7b05e36399ae", "comment": "Malware payload (RemusStealer)", "value": "60c814c50e67dc7f3955480940eefcca439218e841ab28dce2348e5791709ca0", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242430, "uuid": "3fa0e1c4-702b-4d27-9f3e-d87abf266818", "value": "T1D7147C4763EA21E9E7739138CAA54A13F770B42213149BEF07E0865A5F233D1AD39F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242430, "uuid": "3c9c7fad-dc35-4e59-b17a-5b4805579925", "value": "0be878847a955d68de7730bad92f9303", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242430, "uuid": "b4b8794e-2ffb-479d-839e-6d70ae6e94a6", "value": "3072:3gWb82gcMbPdG2kHTmrWph2Pe4Kh62FgFeOWXehLnZz8EN9lDt:3gv8wqyrWpAKhhvORHJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242430, "uuid": "32e00804-3682-4926-a85d-0d210074ecf7", "value": 199680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242430, "uuid": "c3aedf90-d044-4ce6-aa1b-f94d83a59e35", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63edfdf5-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242438, "uuid": "16ea905d-0b9d-4114-a4d7-df9313c09285", "comment": "Malware payload", "value": "16d7c5a0fae204144108c54a6939a085", "object_relation": "md5", "Tag": [ { "name": "pw-9931", "colour": "#108d85", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242438, "uuid": "f2fcfd71-a1a4-4f3d-a02a-515e9ea952b8", "comment": "Malware payload", "value": "ab1ee11f5c7a7a4e0f203daebf06da56fb9ab35dd06b729e4dd57c0fda4aebfc", "object_relation": "sha256", "Tag": [ { "name": "pw-9931", "colour": "#108d85", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242438, "uuid": "fe2a30d6-fc91-4f16-844d-e6de3c700bce", "value": "T11FE6339D44336DF8B6429BA2DA7863B92F15D9482D3382D39711C1E3291335DCBC62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242438, "uuid": "da4911ca-cf2a-4fb8-a654-c754669ac425", "value": "393216:sqm6EbUmQTfdY0GUPYf468za3ih71zOHaNxrDtg5BUsI:sqAFWTPPYfxSwe+a/eLUT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242438, "uuid": "d38f2add-9466-4de1-89d8-9fb4f03a940b", "value": 15023246, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242438, "uuid": "a4e4186d-9b3c-40b6-8a88-026b4a6b3e11", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ce210e9-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242453, "uuid": "3feb5252-0be5-4b16-8aa4-184e2cf6a836", "comment": "Malware payload", "value": "35d6322b7cf842b2f1161ae99cc26238", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242453, "uuid": "c1395e2a-d412-40d2-8ca8-9d6e2dd4907e", "comment": "Malware payload", "value": "ddc6e21fd3ba07162a7836a6dff21634cff35790f052a2872b9a974fd3a4b2b0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242453, "uuid": "ef79771a-5bf0-47f4-aa26-a36500434ae3", "value": "T17C038D06719FDB0461B2578D06AB03654B9F7A9E1FBF4099008DEEC88FD39258D5B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242453, "uuid": "0237549b-73da-47b9-b3e4-f06976e69005", "value": "384:0Dtp+RxOu9WCJJJJJJJJJJJJJJJJJU97H8KRRCUopoYl6HLariZr7aLo+vUXoVtW:0Df7HdiUop4HJU/biq0cmmfMv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242453, "uuid": "e2767922-64e8-488a-9420-50fdf0537ee0", "value": 41108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242453, "uuid": "52f1dcf6-3a0b-4e1f-859a-c0744c19a3c7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d67443c-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242856, "uuid": "6aeaba91-e48d-46f0-9d7f-b0979939c813", "comment": "Malware payload", "value": "54512b0ce0fd9e8c8a53487b7dea7d35", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242856, "uuid": "c733d378-c946-4079-9fb6-72401752771f", "comment": "Malware payload", "value": "1ba76775ef0fce6d9c611c7cae3855da2ab100c6dcb4630644dd5772d8410e49", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242856, "uuid": "220a6306-ab92-4d8b-b1c6-cb3ced8a649f", "value": "T11EE3ADA8099F46BF7333645CC6AF0905FDF0663A436DE58AFB8DE2D06F0600294D69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242856, "uuid": "4df6de50-213d-497d-b068-a1459bbd7a39", "value": "1536:/7JCBqyBQXvBo7sHabgpdmMTp3Z86Zqq7bw8S0XHgj9PZR:1mMTp3Z8m89", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242856, "uuid": "b2f54ed0-3344-4d33-a0f7-f6b95b876003", "value": 154080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242856, "uuid": "f676c0ee-15dc-4184-9d04-13c42eff9cf7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c05f1e-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242875, "uuid": "81cd6929-e866-4f50-bac8-209df8c41455", "comment": "Malware payload", "value": "f87c40658b11b9747f8289ab8496ed20", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242875, "uuid": "3e7cea17-c8ba-41f7-b502-f5d0697123c0", "comment": "Malware payload", "value": "f75d18da5ffa9b579f51babcb4d21fb43ba46f5ec5a1ef1a62edef19a052030f", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242875, "uuid": "33960df3-e3a0-4285-a51f-940ee00f30dd", "value": "T12D64AC3D7EBC1C704BC80806BA8317C62DF875CBD9977687925015E896FAE2489F9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242875, "uuid": "85983d4f-7c4e-433b-8b02-a4beb5708918", "value": "6144:kkI126N4UrXNE9fA5ldfxVb4YcPg4dSIFzyitDtERtfgjE:RS26OSXehAHdfxVSUIFzy0WzfgjE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242875, "uuid": "468a8c32-4f8b-45dc-b39e-4e9b542b7fc2", "value": 321512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242875, "uuid": "b08b8865-8d1c-43e3-b8de-faacd4157df2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c3c27f-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242875, "uuid": "2ed3d4a6-aaa0-4f72-b4b9-b5c0eedf20be", "comment": "Malware payload", "value": "0f43f70d4448d032c788d7dd3609bfef", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242875, "uuid": "ee95fff7-abd5-4881-9d0b-3109437cf49b", "comment": "Malware payload", "value": "c80a83a0309de642cd94efb9ef07b0d368e8eb88e4e954e7ffb87d313b81f61d", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242875, "uuid": "32124270-59cc-43d4-8f6a-25aeaa5de907", "value": "T16DB4220C4B2E2A5EC3E5D0BC79058B7359C4A00D34B5CCB5E2D266D96C63F97EEAE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242875, "uuid": "64fe056f-5d4a-4c4d-b85e-64281ba8ac09", "value": "12288:hUYNLiLyiASok2dtDwF3tYhfu/ru+xPuwpVlxzMaOmzTnHv+l0XUnDoif3:h3NLgyDDk2nDIdYVWru+xnlxwaOmvnHe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242875, "uuid": "3141d7a3-e9f3-4a59-9560-bfc87eed84d3", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242875, "uuid": "29b20887-7738-48ba-b774-deac5905db97", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b21916a8-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778242998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242998, "uuid": "384ce5cb-6391-4005-a6d1-b054915e2ae3", "comment": "Malware payload", "value": "ea68833a92425bbaeadbda93b6aa3c7e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242998, "uuid": "efc1a217-4cf8-46dd-a46d-413bc9dae6a8", "comment": "Malware payload", "value": "3919a4d88717cd5f33e14a9e39956a2e7c4470acefae0a4f30af112754e01c2d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242998, "uuid": "5b300d62-6a0f-4c89-ab49-bc4716e21274", "value": "T15F93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242998, "uuid": "15f6a154-ebdc-4890-94da-b7462fac426f", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXAIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778242998, "uuid": "88a3a021-a72c-4cc3-9216-3e45d214248e", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242998, "uuid": "c795a7fd-2b5f-4811-9580-dbf3c76680af", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "685213c9-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778244959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244959, "uuid": "70b1ea16-777b-4179-8e69-2299d7fcd55f", "comment": "Malware payload", "value": "ba404d162fecdfe716b4728fc406ee60", "object_relation": "md5", "Tag": [ { "name": "pw-4496", "colour": "#08aef6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244959, "uuid": "68ed95cb-5a5d-45c0-83ec-d85074df990c", "comment": "Malware payload", "value": "641f2282c0181ab82a7aa40e747e1308fe46cbbd6998f60eb6194f2b07d92629", "object_relation": "sha256", "Tag": [ { "name": "pw-4496", "colour": "#08aef6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244959, "uuid": "669bdd10-8dd1-4fe6-b52b-65f98834d7ac", "value": "T152E633F2948E76490F9D631F1F502D6A694844AF32F33801E93B798DA54CA47D289B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244959, "uuid": "e8b6c322-ab05-44ad-8087-fb4d2aa7470f", "value": "196608:fG8vsQTfwQsF0PXXvXzJluJ+7hLf7pH/7OGipiGjBM4/CsMNKfhxfLlBUFkOHl:LJw9FMfVVRf7pH/7OqGj2iCTNqLU2OHl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778244959, "uuid": "9f6a87dd-f44d-4ed0-98be-b57ccea5a409", "value": 14557822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244959, "uuid": "69fd4122-2c0d-4268-ba9a-c77d2a94db63", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "475771f1-4adb-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778244108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244108, "uuid": "55294814-58c8-4610-85e3-7d15cc143330", "comment": "Malware payload (Mirai)", "value": "19478e6d11b4c830686f155f8b4e4eda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244108, "uuid": "b4ba843b-5db0-48d9-9231-7bd95baa2f9a", "comment": "Malware payload (Mirai)", "value": "3cb7eda2a5dbc995eaea055beed940f61dbd172d19acfe1821c39a3b3e12db50", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244108, "uuid": "cb91e33b-59fe-472b-b08d-8f4771aa1ce6", "value": "T16AE3F7C7F900E9F6F809E73748530806B230F7A248926A777257356EED7E1891477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244108, "uuid": "7b20b561-1281-483c-9485-d7604e199d8a", "value": "3072:0c824sWDctu+rhdP4VSFugH+eryYArd0Vp38p79O71wCoVxjbiCLIh4YljUem:y0H1yY6d0Vx8epwCgLKcem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778244108, "uuid": "f4913cdc-2467-4d15-b53b-ab025e324e65", "value": 156824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244108, "uuid": "36ce49f4-b832-499c-929d-e5d3dc635a6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12972e3a-4adc-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778244449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244449, "uuid": "6ccff492-0e0c-42dd-926a-060941e53497", "comment": "Malware payload", "value": "9ee8b326bb0cff63fbb39d92caf98db3", "object_relation": "md5", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244449, "uuid": "01bd5338-a504-4c4d-8e65-a31d08b879b5", "comment": "Malware payload", "value": "cde293b30042b0df05c5e8a795ca4b903fcfd6c4f694af13791b567568a82bf6", "object_relation": "sha256", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244449, "uuid": "4ddb147d-f84b-42bd-9e07-61ad58f953ec", "value": "T1AFE633ED2A1CE0415EA4303CB966CCEADF668BB1117F5EBAD818A412EFC3DF55C409", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244449, "uuid": "35940b78-0efc-4752-b356-6ce7d8c92ceb", "value": "393216:SsjqxRe8/L09jFjG3PNolriTJAm3a/3IzaM8RGvksyFj:SR3e0L0XGolOTJ0/3pRokZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778244449, "uuid": "9f660863-4c3a-4722-a695-8fe767def290", "value": 14892126, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244449, "uuid": "6d62814a-6eaa-4d12-9071-4c2e7445eb1d", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed89cc6c-4adc-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778244816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244816, "uuid": "e2e64c27-53ab-41fd-afa1-571f8c918ac1", "comment": "Malware payload", "value": "998cf3312e57a49d477afbc5cb37bd3f", "object_relation": "md5", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244816, "uuid": "7fa8c3ce-14fc-4bc0-ae2d-f64464480186", "comment": "Malware payload", "value": "966bc5cc1c0b12070087f6a9b94c1cab3b839927de8d70ef6700a1be70d408eb", "object_relation": "sha256", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244816, "uuid": "7fa4a912-63ba-4bf2-96b1-2127dea8dd8d", "value": "T113F63352C346899AA87D5E4F23EDEF1334C79025DB754A08F18E711C220DEE2D4A99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244816, "uuid": "7884367b-7040-4227-8a83-70899c8e4e5c", "value": "393216:YeVrVzQufKToVMpTzNPC8Q36uV8vh8ZI4DrOAU:YeDzQubVMpTxd5mIUiAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778244816, "uuid": "664555a5-93aa-4bae-bbce-b6e956f32fb9", "value": 15305646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244816, "uuid": "bfb74353-ec99-4991-b300-76f77f0fb90d", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ad8eec6-4add-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778245026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245026, "uuid": "b451b054-0223-4ae8-b9e6-fce7cdc01948", "comment": "Malware payload (Mirai)", "value": "fa886b59f80564e49c925d5e909edd90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245026, "uuid": "971c7594-f6e1-49b6-987a-da2f91a4466e", "comment": "Malware payload (Mirai)", "value": "6d5f52819cec6d1adf9b7f35d639bf7b070d2e0f9ef5dead33e5f683442eaa80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245026, "uuid": "78a432dd-8166-457b-8a21-cdac61b72318", "value": "T1F3D31846E8819F12D5C151BAFF0E128E73131B7CE2DE72129D246B747B8B8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245026, "uuid": "6917fd43-5996-4cd0-8c39-8dcfdd69571b", "value": "3072:4tZ3AcjQm28IbTtvavYduEMMZ2WoV6zt9yTjdOL9AZ:eZBl28GtvavYYEMooUt9+dOCZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778245026, "uuid": "ff695331-0f23-4f1f-9aa1-8b37b4c2e8c1", "value": 142324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245026, "uuid": "fd90bb76-3a51-4c6f-b3f3-f3ee9ef1c886", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37b848f0-4ade-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778245370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245370, "uuid": "af1c80df-2e23-45fa-9ee6-4e8f84c2bcb0", "comment": "Malware payload", "value": "c422c5a4acd446288d36075c04a4378d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245370, "uuid": "1225c9b7-be81-4177-a1ce-57af27b7d42e", "comment": "Malware payload", "value": "b7c86920503d0c18bcefc4359cdbc6f42c9270ee2bfab8a9b2d65fb005fc75ab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245370, "uuid": "501bd1c9-e337-4152-832a-17ac6ebec56e", "value": "T11493193178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245370, "uuid": "5fbf95cb-dc49-48ff-9be6-1691bc99215b", "value": "1536:2Byp1tF/uwMmAIa14oXTFI+epeV7tb73WdxCrCitkb5fv2v05xyvrEKsjsgTKuu7:28SI10GitkbFv2v05xyvrUjsgTluWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778245370, "uuid": "4b8e4a8e-0a39-4724-8bd8-4c716c129370", "value": 94715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245370, "uuid": "eb05ef8d-5d09-4cec-89d0-ef1c7dbf1369", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52eca764-4ade-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778245415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245415, "uuid": "b6cb5813-907d-4e23-8ae4-e3893f51488d", "comment": "Malware payload (Mirai)", "value": "ef046d6797ffbd54fa1351210c49bdc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245415, "uuid": "52abfd7c-f358-4ff7-ac57-b6ee9f24438e", "comment": "Malware payload (Mirai)", "value": "38e4193816b8f46765e0fef1bbbaf0447188ddc086cb6b8a9604757cf2329a82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245415, "uuid": "44e4e452-ee87-404e-a88d-06a93b09f231", "value": "T184D39EA7B30F2450C42507F41BCB5BAD2A3325018E6B96E72C6E363E5A775DF68063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245415, "uuid": "8762cf84-6b67-4c63-a77c-a22479b300fe", "value": "3072:VnMJ0iUxXH6MPWEKmlAdQ385UXcgqCjLgF0rq:Vndb6/EKitsaXACjLg4q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778245415, "uuid": "f5818d1c-241b-4fbf-82d3-89dd9d314b5f", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245415, "uuid": "c37f8c4c-e63a-43f3-83c7-edd571a2e33c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "467c6797-4adf-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778245824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245824, "uuid": "66297978-b8ee-4373-a4f1-83f46c7e975e", "comment": "Malware payload (Mirai)", "value": "b058e02e29458e7b5222f867371953e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245824, "uuid": "8d7dc577-7ef8-470e-b6ee-ee661bb3f28b", "comment": "Malware payload (Mirai)", "value": "b597225594559aa12bbcca3a425fc8e1346bda36789e37932175cd463ec260aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245824, "uuid": "82bc12fe-c72c-4ec7-9990-0035e603b09f", "value": "T1A504A81A6E228F6EF67CC73047F74A35976D23DA27E1D684D2ACC1142F2025E541FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245824, "uuid": "b313c9dd-bf75-4241-b3d7-faffd0d54039", "value": "3072:X8hdP+108idLXajPBRMgVzc2Dvfo/i+h47dDE7:X8hqaDarnpcuX8Xh4pDE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778245824, "uuid": "297cc0fe-ccc3-4ac9-8328-4c5fd1c01075", "value": 174552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245824, "uuid": "ee843376-c47d-4351-b73d-ce17e39b2c7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "624119c4-4adf-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778245871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245871, "uuid": "5dbc7bb0-6e81-451f-9cde-88f1fc03ad2e", "comment": "Malware payload (Mirai)", "value": "f1d822d06ed70b4279549adc35fdb8a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245871, "uuid": "e94aab22-c183-4acc-9555-f949903be1c4", "comment": "Malware payload (Mirai)", "value": "32521b2316623775148471c5b6015801625d7ef95b696d37ee937fecf31284b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245871, "uuid": "fdb923a9-038f-4202-bfb7-def6cc084900", "value": "T148B349A3CC256F68C624E5B4B0B18F792B939A6091875FBE15B7C2749083D8DF9053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245871, "uuid": "98e47d54-f61b-4012-9365-6ee5bb68b86b", "value": "1536:+s2ahljEj0Fw5C9KmUuF7+X6mWHlWRzyRJ+Wvcgzz6ru5fr+bl:wa7uMw55m1I6pHlWUj+WHz4ulru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778245871, "uuid": "125e1b5e-d7d2-4281-bef0-66f9e7c71180", "value": 117368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245871, "uuid": "f172f254-1758-42f1-9598-a629c5277cdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4bb9479-4adf-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778246009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246009, "uuid": "0d65f881-6769-41b3-a4e5-51f5d1252420", "comment": "Malware payload", "value": "1e4355d8edd2cd3c8add2e780ef9f532", "object_relation": "md5", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246009, "uuid": "f8c3ada5-9e7f-4b62-8f9a-26a54b95e272", "comment": "Malware payload", "value": "2bc0a9b7957c7629e910a042f2d320cc61b7b30f64c5ccae7a561e6ca69162b2", "object_relation": "sha256", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246009, "uuid": "b72fef71-442f-42a1-a034-d2cea93b69ac", "value": "T13FE633F5E78B53AE12B471D4F8265D3643FF031A01E90C17CAFDA83CC9694A8E52E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246009, "uuid": "3ace12a2-4298-4317-a5f3-1c46119f6436", "value": "196608:bdUrmpX1NjPwuL1tUEVEy1kXs3dKja5Zvv0CEcLfCqqxaDScKYrqmDxucmWijI7l:Zt1hR1AhWfBqojKLmDx5mR/3LGSm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778246009, "uuid": "b56f29de-cb9f-422b-984a-6e9b4a328816", "value": 14695630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246009, "uuid": "4b490669-cfbd-4141-ab68-9700293a5c48", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9c239fb-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778247360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247360, "uuid": "75588539-f2f6-42ce-84e2-f05bff665fc2", "comment": "Malware payload", "value": "e4e9af80a613386ed85b7661696d8d61", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247360, "uuid": "c9cff515-1f00-4b42-a832-cf98b723554e", "comment": "Malware payload", "value": "1bbb333e19d6da66ed8f4085f3c26a50624b139f708963872d21307665edd188", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247360, "uuid": "69e5a33c-87be-4f9b-a1da-5c08b1949cb4", "value": "T11D8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247360, "uuid": "1bc660de-4775-4bae-bee7-251e6073a97a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnlWaRVN/:XEKltp9txAX/yr2pblW4VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778247360, "uuid": "20dd6ee1-613a-4e56-bf8b-6d1c981d7e6a", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247360, "uuid": "c79b8888-6a28-495b-bf89-a0c8dadb7c57", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35b78db2-4ae4-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778247943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247943, "uuid": "d6d91b01-a1ce-4232-af40-8b3522d89873", "comment": "Malware payload (Mirai)", "value": "b8a46030dc5b36c6222bef3e3c22e993", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247943, "uuid": "a2bb4ddb-cb49-4aca-a64c-bf2e91c7d49a", "comment": "Malware payload (Mirai)", "value": "334033351ec5aa6f61928b789cf74238c625c4f8ab067b1d2fc21ed51c12d653", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247943, "uuid": "563ff8a1-430d-4963-8e27-06f1ce8d752d", "value": "T17B04D81A9F610FFBDC6FDD3701A90A0635CD954722A43B393678D928F54E90B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247943, "uuid": "26d1841d-5bbb-442c-b770-2fe8d6fe1890", "value": "3072:f5+BhVi1+PbfS1pGJhE1EHmxX96hTlqwNw3nF2iP7:x+/oYbfS1pKsEGx96hTlqwi3nF2iP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778247943, "uuid": "43f8bab2-423b-47ab-946c-dae9abf8637d", "value": 177432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247943, "uuid": "7de5c796-33c3-4402-9a25-aa7a8a624116", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cdf034a-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778249244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249244, "uuid": "32ae29c3-0a6b-4997-9c43-1ffa77e2b4c6", "comment": "Malware payload", "value": "76cd9e60c306fcd46958d592a448bc35", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249244, "uuid": "e51ed620-576f-4252-a491-668ec762d35b", "comment": "Malware payload", "value": "47ecd46c91d74a8d6467c7e4d6a038e9d5f959007b341e089c97589f31b25970", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249244, "uuid": "6ac15567-df55-4b6a-a401-37620f50b601", "value": "T1D93516BA0CD14D9C03C5995A99AE16D05F54EB88E0EFD75CFA6ECDDBA1C1C0B82C86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249244, "uuid": "0b820e4f-3fa9-4844-aff4-7beb9509a83d", "value": "192:lqWvTyrjFOrk76iurmfYwgI8clonFexFy+W7stE7kBUP9MG5jFsuiXPFqq6Ns9FM:zVbFKWkhMb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778249244, "uuid": "f2bdb399-d6e9-4e3b-863d-dd02fd67632e", "value": 1157849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249244, "uuid": "5b607b8d-c1d6-46fb-8dd0-d3bc240764cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "987f0ad3-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778249827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249827, "uuid": "44193f27-a0e3-4995-95c9-b2328c2690c6", "comment": "Malware payload", "value": "80cdd5f19d704a001589976bae277bab", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249827, "uuid": "5664a5fe-c3ea-498f-be3c-f97e68a07d9b", "comment": "Malware payload", "value": "5d69a932a077fee044b193c28e84564143f5c7e51079ab48e88fef74ab0b77b7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "4de5e64f-1ef2-4243-aab1-1c5d8ac2f9a0", "value": "T1DA356C0673A4419EFEA7F1329607C60BD6B17C4A07779A6F02646B626F337711A2E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "59696110-f6ef-4470-a1a7-5205e05cda00", "value": "c7c3037b263495fcb3a267d98eea8123", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "ccc949e0-2558-47e6-8325-5628d07c7849", "value": "24576:HsTBc4JYoji1a2gOI6fQJ77jkD1KV3wKct4frNFOB:MTC4a4p+E72SwRcrK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778249827, "uuid": "1dab1722-b630-49c5-a3f4-b5f540ba8c81", "value": 1107552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "b7a4184a-e0e5-48ac-9bac-58d31a42ffb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98a21088-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778249827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249827, "uuid": "6861587f-a00f-495b-bc27-97be69e714ad", "comment": "Malware payload", "value": "7d1bf4c3702ebba06e370f9ae3508678", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249827, "uuid": "32222638-3c89-4d47-a1a3-2c67846d9677", "comment": "Malware payload", "value": "63b9c27f5783c0cb6907b25b528dbdc3e13d823e5442ac5b560541e97f1c7356", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "1704361d-61b7-464e-8d61-2e41b5b6f9bb", "value": "T1AD65333B067ECD047CF92545D6A9FB549517581FB8E0A8E89F3E22530682F022EA6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "96f8ddb2-d894-42c4-aed1-9fe8a7ae4c93", "value": "24576:NgdpDtj9327QM/HobdL6hwb0Fd0293Wv+QahA29KqvQdZFhm6Wu4d6DMaj:SdB5932VwbdL6ZF6CWv+QahAmvvQVr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778249827, "uuid": "e0ec214c-f8e0-43f1-b012-d5311c94997b", "value": 1414112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249827, "uuid": "0e8da615-17c0-46a4-b63c-7792ef22cd6b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb36422f-4af0-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778253402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253402, "uuid": "f892d674-3a50-4080-93a4-60de0382a5a1", "comment": "Malware payload", "value": "c7aa87dbc7de0d4dd3a136cc2530ef14", "object_relation": "md5", "Tag": [ { "name": "pw-9931", "colour": "#108d85", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253402, "uuid": "040ffb4c-aee7-49a0-aa97-83d4262b2e2e", "comment": "Malware payload", "value": "a55e0c328193005e8b763f1083efead8d3d9a789ed52c01b1d978de6ea758989", "object_relation": "sha256", "Tag": [ { "name": "pw-9931", "colour": "#108d85", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253402, "uuid": "60f2640a-09aa-4a9c-beda-13152d33594e", "value": "T11FE6330D33D53147FD2C86844EA876EC92D58D2F7939BE9D5E2F37E148B682253102", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253402, "uuid": "73bb2426-1136-41d3-9bf3-8567a72ff13a", "value": "393216:gsBwOVjxyiGCPSXh3yjFA3qTLDolyz2GKA:gsBpV1lPSXhkmqTnolyWA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778253402, "uuid": "34669678-4f5f-4003-9f2c-dad63aac20f0", "value": 15016030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253402, "uuid": "27f6448b-442f-46b7-8666-cc80ea657570", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87df1b24-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778256242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256242, "uuid": "69f33f0a-9165-4aa9-a123-4e8219a7d1cb", "comment": "Malware payload", "value": "15c647736d3f23a543a4bcbe8922c185", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256242, "uuid": "6e2757dd-f8c7-4f87-bbb8-e7dd545bb724", "comment": "Malware payload", "value": "d114d40ba5f58c9b51b198afd1e454422f6ba10ffe12867f9a68a2f9686515f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256242, "uuid": "1ebcfa65-86f0-4ae7-a3bb-5184ef0e509c", "value": "T15CB012471C52CC4572B46180C861E81C4052C05ACEA0C401D7C0AB75B6647DF9D2C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256242, "uuid": "91f58a53-38ad-4803-bf51-bfcc9bfa46ce", "value": "3:gnkAqRAdu6/GY7vFF/wOSVam33eMAMevZUYLn:7AqJmrUVL33eNMemYL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256242, "uuid": "bdfd7452-a70a-4629-956a-e75a41db1c64", "value": 102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256242, "uuid": "46ba8608-2eb8-4705-8eba-4e8393e569cd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f5fcc3a-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256254, "uuid": "435897b3-ce2b-4fa6-95d0-848f8fa0d025", "comment": "Malware payload (Mirai)", "value": "b28da8eec51f80d1b695c48184f6034c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256254, "uuid": "dbd587c2-2fca-4d03-8738-fee4e533ad0a", "comment": "Malware payload (Mirai)", "value": "88d0e71a7b7bd08dac9398045752d5fecf1078c5cb7fcbc27ab23c7be7c72581", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256254, "uuid": "b903e027-95da-4970-b9a3-c995b26777db", "value": "T159E3C61E6E225FAEF3AD823547B78E61B75833C523E1C541E1ACD5121EA434E602FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256254, "uuid": "eaee40c0-e512-42ba-8d0d-b932883022c5", "value": "3072:cifBQMOTSBMDT3GrljrQYgThz5H//uFqghlYdaybwbZnCcu:cKQMeLDLGkz5H/2b34bwRCN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256254, "uuid": "bd2fb968-9659-471f-ac10-414f09caf915", "value": 152280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256254, "uuid": "7de7f4f4-54f2-4113-a783-d147f41a0cac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f62857d-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256254, "uuid": "ab95c217-94b0-402c-80e6-53a712cc3879", "comment": "Malware payload (Mirai)", "value": "cd4b3212a77da0088bf917f1701bcfcf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256254, "uuid": "6cef4b7c-1d95-4bfc-b4e8-01e7f40163fe", "comment": "Malware payload (Mirai)", "value": "c9f5b36208c8903b735ca19ad9658ed924a6155e45fc7dd6d64aeb4dfc4a29c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256254, "uuid": "83248ece-701a-4691-870a-51b30fc50309", "value": "T1E0C3189AF8825B11C5C706BABA2D518D331613B8D3DF72139E10AF64B7CB81B0F369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256254, "uuid": "cf70a6e2-bd4c-4620-8c8b-1302d958b897", "value": "3072:ywiKZtpMK2Tfcx20alA09WFmYOMwbZnI:ywicMPfcw0aagEOMwRI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256254, "uuid": "225c7258-506d-4fe6-a4ac-7f379af96cf4", "value": 128532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256254, "uuid": "4b808e80-6296-42be-8df9-d42271567676", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b923e67c-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "0a4af517-5f68-4a68-8930-852d37adcede", "comment": "Malware payload (Mirai)", "value": "444fb6eb887c9ee1e98a9ec3e0e081ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "20826b0e-2bee-4c1f-b44a-fd8b913fa229", "comment": "Malware payload (Mirai)", "value": "f869202d680d143ad0fdf4cca662510ee22661db8d6772cc240cc976bf06f4c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "62abffc6-4fb9-4c0b-9879-1488545239f1", "value": "T12FC35B31BA761E27C0C4D6B721E74721F2F243CA21ACC55E7EB20D9DEF246406296A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "6384631a-47b9-481e-a24a-479fd9c30615", "value": "1536:OOwydzYBN8vRJZcc2ZOA2m3rZVVriV1gQodtXdlM5ciMB8DtMiJrnDADwbZn2no:OLyeMcr7VriVYdNdl81KiuwbZn2o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "c035eaa5-d79b-4a3c-a583-f730800e0b3c", "value": 119020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "4b666195-1b31-46ae-a279-6237158c7b87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9253da2-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "7b01ae4e-6fdd-4f69-8506-5c3bafeb591f", "comment": "Malware payload (Mirai)", "value": "4439d57df540ecad6b711bbcabaf570c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "6290733d-d685-4c99-b92e-ea83bc0e7388", "comment": "Malware payload (Mirai)", "value": "5fd9f9a475ed90f464b37a86b1fbe50b3efddfa10578716315380a6ec74672d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "4dee8e8c-3735-47e3-9418-7676dbc3c655", "value": "T1A9B33A46FC829B12C6C613B7FA6E418C371913F8D3EE32039D126F21778A85B0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "1158abbb-bac4-4e52-ba29-2613d61c9f6b", "value": "3072:h2u78uJzKmaAhMI8O57Ni6Vax53wbZnN:h2uA2KkhJ8O57Q6m53wRN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "73e34c97-af80-4293-9328-faa5146ebc59", "value": 116268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "e4ccade9-46f1-40c8-b8e0-f515ac7ce33d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9246826-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "942b7b54-ac95-4ed7-9a76-cab04b569d13", "comment": "Malware payload (Mirai)", "value": "3013f0498acec847442e682208104456", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "98e9e3a4-d460-4609-a1fe-d4970dc0ce28", "comment": "Malware payload (Mirai)", "value": "f6b6b4dee7ed6a67f176b1d48434985630a10a9f4769c4da0a71c04960d05b36", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "426c6b25-b320-4cbf-b8c2-eea76f608d04", "value": "T13DD35C567AC188FDC049D13417AEE036E8A1F0FC1378B59B6BD0AE325C4DD615A3DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "f14e363c-3598-45b6-8e55-00ed62b5475d", "value": "3072:NWm/NUKdukxTP6beXeSo7g5v18gQ1rcdzrCvFysc8wbZnv:NWm/NUKdukxTP6bCeSoqFewdzGo8wRv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "f1670509-3ce6-493e-a869-5c207e19d0a2", "value": 139896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "4abe1134-f088-4362-a689-e2663d7d07fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b92155e0-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "dee64f22-f625-4434-8e96-414c637606e5", "comment": "Malware payload (Mirai)", "value": "8c81027f7990f164df33cd5466d09c36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "512aac93-428c-4ffb-923b-a8656e4c85b7", "comment": "Malware payload (Mirai)", "value": "331becf8eff63cf0b668ccecd096667c5ae8f6d36a04e4acc2693ad8cc67c3f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "25b23f1e-f139-4d0c-b296-656a8da430ab", "value": "T120E3E50AAF210EF7E8AFDD3753ED0B0124DD954A22687B75B570D858F18A14B06E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "b44c5c6b-0cfe-4abb-96c8-67812ad8b686", "value": "3072:3uRYywLlCIcQ7Q1Z52O17NYV4fvp/eAwbZny:+RYywLlR17MZ52C5YV4fR/xwRy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "17d06f73-f21b-4ef2-b906-1f796fe62e4c", "value": 152968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "bbbd5c25-f4e5-49e3-ade5-79df00585bcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b92a8cf7-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "b7344633-17a1-4e99-903d-f372014b8036", "comment": "Malware payload (Mirai)", "value": "ab1c87e9f7c61a1d3394640985eb2ce2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "a5a57b36-0fff-491a-826b-fd5cb783ee8e", "comment": "Malware payload (Mirai)", "value": "cd271f2c1f620ddf7ba3bf36b8fe8de1d5f67fd48831b006238c3ad12ef53f95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "04f75e9d-e5b2-4330-ad24-82858f1e6a6f", "value": "T10FB39DA3D1051D64C227413461F8CFB43B62A98642935DF666E2853E904BEAFF23D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "4606b1ca-84a9-4dc6-a9e4-b67f4c255eeb", "value": "1536:TaV/biDFZCYa4Ibs+3/e8l4kBfzskBwcnrdKGECq92pWCEmJ6CR7rXDwcwbZnN:TA+704If/hdzPXnYGm2pWwBwbZnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "01e70bc6-3277-4856-9f83-c3d02c813433", "value": 108072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "38ad220c-5985-47f6-afb7-5db25166475d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9282394-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "ebfaa80d-5132-431a-8995-ed023bce78c8", "comment": "Malware payload (Mirai)", "value": "82f7d34cc92da75e9254957224deccaa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "15633fe3-cfef-435d-8ec1-1beda048f359", "comment": "Malware payload (Mirai)", "value": "c08e8d2c5149c95197e3ae2d51e9a6a0a80b3031d51c8d9dd75f05eacff882e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "95a25442-f831-4306-8834-be169c03bfa9", "value": "T1A0145B4AEA814E13C0C717B6BAAF9245333297A4D3DB73069914BFB47F8765A0F239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "7f7ad538-2339-4c25-bc5e-3eaf59bca937", "value": "6144:KTOZxbWn+aou9ovT87dRAZwR5jvFVM/9HSmEw3bqiKuR:KTO3bWn+aou9ovT8/hxS/wmEMbqiZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "180d6517-7366-4cf2-a45c-3ad39eabcbcd", "value": 208367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "04eff698-5f34-4546-9934-6cc7dc924fc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b92a67ed-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "1b01b1d8-1c70-44fe-924a-4d4615279026", "comment": "Malware payload (Mirai)", "value": "b1ca9cc75cbd5a922c41e05cb8164155", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "c7fd24fb-7e08-447b-94ae-4307bb685cbd", "comment": "Malware payload (Mirai)", "value": "46aef52888e61d392b6e530179273b2033701b69a44cdefc4ca3243bbaeef0ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "2d434553-5f4f-4c5b-85a4-5a6d5e99c75e", "value": "T151C35BD2F8019EAFFC0BD7B6845A0909B5B0A3806FA3162AB7D77D97EC760D02C16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "be66fc4a-a07e-453f-a5e4-a9966ae2fe05", "value": "3072:ve+h30HpfLtnEW6ZBRGagKgrkby9ELeTBnHR:mbH1RGRGa9gKy9KeJHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "f8e2805e-3f7b-4cb5-9e2c-7989e97aac6e", "value": 124464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "9f958f44-fa1f-47a1-b514-edfcf3acf508", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b92d74a4-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "da7fc3fe-e206-483f-9fb5-19f69a61b18f", "comment": "Malware payload (Mirai)", "value": "0ded9d297d33b2cc79d7960e120ddeee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "e67fbef0-ff1d-4d06-a606-05c08bf82c48", "comment": "Malware payload (Mirai)", "value": "cbfb83b43787208fbdcb28f37d9a21dd7327192e64ddf6ff3d912f1b71abcb57", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "32c4effb-e5bc-48af-aa03-03c84e8e8dd0", "value": "T1FDB34A0277394E03D1A31FB02E3B27E477AEE4C221B0F545299AAF5E8179A335945E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "deebd215-4593-411f-9143-6b756684d74d", "value": "1536:OWJL9aYbBqwreLgd6uKaP14hJm3eJRvFh2tyRhIwjSjYB4wrXDwZwbZnlf:OWlwmqwreLgzyY3eJ9lhIOSVfwbZnlf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256324, "uuid": "152a965d-7b2d-44ef-b121-bcfeb17a8728", "value": 116368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256324, "uuid": "fcb266fe-2a8d-40aa-88bb-17466d16e935", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b93d715b-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778256325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "0afd0abc-3f95-4e2a-8fb1-20387dfd9d85", "comment": "Malware payload (Mirai)", "value": "284d529d29c06868b3b7bbb753a2fba9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "28743dc7-868d-4bc2-80ce-d5c7af0b2aa5", "comment": "Malware payload (Mirai)", "value": "9bb1791962eea553760bc577d807dd0566cf0760c9e9aea8d9d3c21b2705b4db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256325, "uuid": "875b1b4a-239c-4a53-853e-ca907559ce2c", "value": "T181B34B56FC829B12C2C613B7FA6E418D372513F8D3EE31079E126F25778A85B0D27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256325, "uuid": "9a268d1a-f5f5-4384-a602-fe292d038269", "value": "3072:fqpejv7A0WPmohM48R9J7ximB8NU3rwbZnN:fqpejDWZhJ8R9J78mWUbwRN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778256325, "uuid": "07da9a14-3205-4e0c-b32c-55c273b99943", "value": 112172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256325, "uuid": "343019df-6964-44db-b33a-b271fa49af79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1309d626-4b07-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778262918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262918, "uuid": "15a04ed5-ca0a-47e7-874a-4eec6ac7f845", "comment": "Malware payload", "value": "066f586740c258c504410ecda8595441", "object_relation": "md5", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262918, "uuid": "8609be2d-f649-4170-a5a2-2c10b7ee8620", "comment": "Malware payload", "value": "9af7e8799cc366ad7210875e65009a6fb27a455c28a3f274bf00d917cc8b222c", "object_relation": "sha256", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262918, "uuid": "a5034bca-b914-47c6-914d-6e97a1c153d3", "value": "T115F633615898A21BB0D334EC14DBFE063E9D23C753BCC47E8B9248A858EFD6B14456", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262918, "uuid": "00d99a51-9036-4846-a310-40f0929c41fb", "value": "393216:mZtGvPSz3YMnFQ6GQFuFnen/g1GbZLSM8owhMte:mrGn0FQ6bFuAno1Wd7TYEe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778262918, "uuid": "b29cd549-a2c1-4a0e-9d1b-696004664136", "value": 15289806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262918, "uuid": "1c6e18f3-cfe5-4b57-ad07-43666a55f1e8", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1545a5f-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778264955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "1a0f4a24-a718-42f2-b861-e482acc2905b", "comment": "Malware payload (Mirai)", "value": "17f7c7f48471b1f0ef8393f6558bf62f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "860a948e-85f4-46f6-a8a0-86ed94887d4d", "comment": "Malware payload (Mirai)", "value": "90f9c3f1aaec0a842e717a7a7c1219391b735efb73bc03054a866a15db0412f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "a00e6e47-b14e-4adb-a4f2-df32de36dff5", "value": "T11C43F14CDD84B6D4D6890C3B94C81AF6AD58B0F468D247DDA311CA81EA2D58FED4F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "72dae0eb-a803-4a0e-b296-07458c3c8c83", "value": "1536:ssbn2fyHCAYG2EOpJTAlA57h7YW6oWPxvrEu:skn2KHMG25cKNhJu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778264955, "uuid": "9c408a5c-7fba-4d65-826e-30d142ffd278", "value": 58036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "34a4bee9-0df4-425f-894d-3a24b51cfd89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d15842e2-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778264955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "a412a425-0303-4057-a066-2ea83bfe5d9a", "comment": "Malware payload (Mirai)", "value": "109cd3acfbdc7a042a2a02fa2ade2ade", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "ca57c2cc-769a-4044-8c76-e438ef18ae3e", "comment": "Malware payload (Mirai)", "value": "0a869a940446289979d50aded97f07b87879154f50feeb186fc79f91a48b903f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "9096c3bc-ed49-4819-b752-c84eb6eb7ea6", "value": "T1F6032A8173280447C1B62EB0357F1BD0E7ABEB9222A4F389750F9B4AD072D379546D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "d57a3d23-9c35-4919-923f-260deb8a3129", "value": "768:16KqIf9Yr9GKrlfnitOeH/dOsnKoRIOlb3B87:16736Qef0sn5RImDy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778264955, "uuid": "74a01602-982e-41f1-9fcf-d92b69c4041b", "value": 38816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "56d857fe-1b53-4f0c-8964-5005c260470a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d161e94e-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778264955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "265d6560-5e2b-436d-a5d4-6c90a817ecb3", "comment": "Malware payload (Mirai)", "value": "9ce6fa0cba04fd04af1d8ad1daaf5299", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "832f7afe-96f4-4cff-82a5-57577c66a163", "comment": "Malware payload (Mirai)", "value": "70e8eafdb11d066ca6a69391a1e5a4208735a45805f0dfd6858e3e83a4a3edb4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "86462891-107d-4293-91e0-5990068ee244", "value": "T150F329CBF800DDBDF80AE73B08530909B530BBD150925B37225779BBEC3A1991967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "a655f06e-6629-4a6c-8fe0-35981f399af2", "value": "3072:BS51u5w8WOuPwNLM4L8FQxNynZVHjbiILQo2qoyZl+9U:k1+uPwNLM44FsynHLMyZI9U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778264955, "uuid": "b87fbb10-3918-4d3b-b4a5-3a0ecd78265f", "value": 157440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264955, "uuid": "652af2da-17b4-4b7f-9118-253071f9027c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d44acee9-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778264960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "5f349cbb-b831-4724-8160-2f4c874ebd9c", "comment": "Malware payload (Mirai)", "value": "f325c2db67b83406cb85bcbd4a21cb61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "9fa2d67b-7aa8-49bf-a4d4-017e58db8c13", "comment": "Malware payload (Mirai)", "value": "464fbe0833d6b5f7671ebb91ecc99682a2021a63ca6f989616c33a0dc9ab06ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264960, "uuid": "7018c011-1ef6-47ae-bd24-627f64c8e8a9", "value": "T1B113F684B8869E06C6C0537BFA0E82DD3B2973D8E2DD7303DD156F513BDBA2A096B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264960, "uuid": "0cdff0f4-df28-4156-94f8-e0b19f8eb218", "value": "768:boXgKS/E5do3soaHo8zwESkBxl3zhdQhLljkbsZV0w1Wbg5:EXgB0tUg7BXQ0bu/oc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778264960, "uuid": "dd3bbafb-60da-47d2-941e-c4419c1d1793", "value": 41980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264960, "uuid": "653a5c8f-5000-43fd-8436-5d390bb5e84e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d45ca095-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778264960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "7960b80e-c158-4b4c-a179-f50370b9f224", "comment": "Malware payload (Mirai)", "value": "62dc45cf4015dd01f985e37c315aaa5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "d310e4fb-a335-47e6-8133-2c820b478d7a", "comment": "Malware payload (Mirai)", "value": "fc55d1009f1463fe2609312a4bba48238e00d311ce33a53184c6b3c871bd7987", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264960, "uuid": "ab055a33-f183-4c9a-a03b-7c4dbb7e5e2a", "value": "T1AD43720ABF600EF7E86FCD3745B91B45348CA40A21A97F767934D428FA1A54F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264960, "uuid": "a1c98f04-29d1-4d0f-9a3c-e9a68e72d7ba", "value": "768:uiwOJE1JKm+JCr+PKvU72djlUWUebneEQeSe7cCKZxxjXiu0b7S8xdXs:uiwcE1JK6U6LyKnxQJe7OZxx47pPc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778264960, "uuid": "e337364d-298e-4b32-9133-bd76553e229e", "value": 56972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264960, "uuid": "eec84455-255b-413a-8afe-fa13dd014efd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d52e4c79-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778264961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264961, "uuid": "95dc32ab-c947-4675-927d-f7d6263e1100", "comment": "Malware payload (Mirai)", "value": "e1cbc66b8f9f006e60602d797129806d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264961, "uuid": "0f3f2d7e-8393-40fd-bbcb-3960554d7c3b", "comment": "Malware payload (Mirai)", "value": "1417d5048a9de3c5754b2922bb488431a9d1ef4ead63dc8b5797f06ab2adf501", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264961, "uuid": "143120f2-8075-4fa3-a660-c4937ded74a7", "value": "T10C13F684B8869E06C6C0537BFA0E82DD3B2973D8E2DD7303DD156F513BDBA2A096B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264961, "uuid": "1dc8bda6-3417-4f14-95c5-4a3cfc0f7bd3", "value": "768:5oXgKS/E5do3soaHo8zwESkBxl3zhdQhLljkbsZV0w1Wbg5:CXgB0tUg7BXQ0bu/oc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778264961, "uuid": "57b9a230-ad00-472f-b993-c63073bb9807", "value": 41980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264961, "uuid": "17707f75-feaa-4fad-8563-d04fa629c05d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b68c283-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1778266448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266448, "uuid": "4f3a47ea-2b05-4170-a275-b80fdeb8e26d", "comment": "Malware payload (RemcosRAT)", "value": "b77dda0d27c2ad9a88cb871983953746", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266448, "uuid": "d34360b3-7e27-4474-ab80-67e12e6d510e", "comment": "Malware payload (RemcosRAT)", "value": "e5298fb7c097584f5005c6d1f4b422b93bf02df88e1265331f0b81b21e8d10d9", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266448, "uuid": "0d2ee91d-09dd-4bd4-af6d-941ea9d25a44", "value": "T101D489B5D816B82EC0972B489725D2CB8C0B3B4C12185F02FCDE521F766BB7BD25D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266448, "uuid": "2deb3492-2c21-4e84-af91-321dc66589c1", "value": "192:FpH4snYGTd7niJgeqoo9ToBboIXJNWoaUqS3oH5faQb8HmlopKoTk+IywQVzknEu:FceshaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778266448, "uuid": "b3edf334-1d2c-46bc-85ce-f2b24372d5e1", "value": 616786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266448, "uuid": "c3602f85-f4a1-4e83-8bb6-22e2046eff04", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ed6baad-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778271501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "48c56d0c-3e9a-44ca-9cad-f5cd6c8aaedb", "comment": "Malware payload", "value": "1fe690c46537fd8280849a15666d450f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "d73ef2a9-afef-4661-8f00-58c51dce37ed", "comment": "Malware payload", "value": "1a8db74bf751f4acc8fda9ea4d5aa56518241e322a530cff30cf56a4bbcc591c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "0a864de9-47c2-4cd1-96bf-ca337452a907", "value": "T114C3E1E1D6C74E56F2C95A72238C7AA617B88977501F4340B7B5AA79BFA03C2970F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "501699e5-3db6-4660-87d2-95162977d182", "value": "3072:1U/suahz+OJmoqYdmX3kOznC06vXMfQS7ZQEc1BAd+i:1dLSOvqymnlznL6P8QaZQEoWQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778271501, "uuid": "c2c9ffdd-7a32-4745-9ec0-15b3dc1045db", "value": 123522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "74760d85-c000-4780-baf0-84f29c395cab", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ed64ae9-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778271501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "95aaba06-260b-4428-a394-5ad304f9adba", "comment": "Malware payload", "value": "143a51ca7df8e6c60bf2a6777cdfc0fa", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "9da230eb-1aed-4675-97b6-6f7ad9e7b140", "comment": "Malware payload", "value": "3ce4e7a802f232057068b0daac78cc72f810e53e7a1bfb2a825969b18650ca1d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "65f08c0a-a296-4e53-936d-dc9d0e04ab58", "value": "T107E3E15DF844EA91C6E32C79F2590E1433930778E6F431019F2F6E68EFA315E4927A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "42bfa120-b9cd-430b-a47a-34fd5a5941c8", "value": "3072:g8icHMgi9Qy9+/OSwYSAc1qjmr1s7UQloep9jK:lr5GQy9+/pRXc1x5s7UQZp9jK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778271501, "uuid": "c0c9399b-a836-4f21-85cf-7e1ff7003380", "value": 143858, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "492e9e67-1866-4b38-b447-0d7b17c38428", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0edb8e58-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware payload", "timestamp": 1778271501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "544285e1-65be-4ab0-abf8-0d99bc24d76a", "comment": "Malware payload", "value": "4c0125c6b40c624be44fa5024954417c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "1596a886-61f7-494a-88a8-dbcc94f36035", "comment": "Malware payload", "value": "c1cb59ccdab7667756c2be2135231115a618ea8319a9ac799e71c32bf5f2c8a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "f5f08806-471f-4ce5-85ed-4e029d1bc5bf", "value": "T147D3BF037E452E3BD0E148B546024553761FD9E1ACEBAE1B8358DEF7B3A623B8E4D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "a6a7b1ec-e238-41a6-805f-0e80e7482ad7", "value": "3072:H8fgRpho8Uuv+O2RDZHcOO3QpA2jZvKPU/bduhhUN:H8YRA8MO2RDZPOcA213/bMUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778271501, "uuid": "c3310bec-80db-4738-977c-e7b54a8d5392", "value": 133410, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778271501, "uuid": "2f5724bd-6382-4554-b9e0-bdf463cfed6c", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9054c2b-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778280913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "24ef197b-10f3-479d-9f7f-7b9964bd11c1", "comment": "Malware payload (Mirai)", "value": "2fff7eb7de343b909f614ec15ee74fd1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "d912e3cc-9ac5-46e5-9914-a186af8f7aae", "comment": "Malware payload (Mirai)", "value": "853ff7d9ee6129a01fb4dd8eba9c72d73c1f118755e6fbcbd9a1b0ca341df660", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280913, "uuid": "f4eb1393-7da3-4053-a17e-325d72108094", "value": "T13AA329C1F68B84F9D54B48704066F33FCE32E52A8071C96EDF99AF36DA3764192162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280913, "uuid": "ee081d2f-cf88-4d78-a443-747a6020f4ec", "value": "3072:ZTdeqPbQ0yhOEckEUI6An128egcTz3s6SNCoUKcnsEW+QuY3uRa:ZTFPbQ0yhOEckEUI6A12ZHTz1Kmn0jF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778280913, "uuid": "cb3e6971-a4ba-4c14-860c-db88abf1e105", "value": 99508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280913, "uuid": "23d0a758-d01f-4668-b091-72d29c0e721b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f91fcfb7-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778280913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f99029ea-cddd-45af-9185-1e5b606614e7", "comment": "Malware payload (Mirai)", "value": "56e556805c74d7b8ae5b86390a66e13a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "1abbea83-02f7-4e19-9c0f-5cddff5fe1eb", "comment": "Malware payload (Mirai)", "value": "7d1e6e09f321a76ed6525368f44d41836243e176db4207bec51a422e7c4f544e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280913, "uuid": "9c8f7ceb-bcbc-455d-bbf3-33cc56d10fa8", "value": "T180D30816FB210EFBDCABCD374AE91705258C651A22AE7F367934C928F44B15B16E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280913, "uuid": "1ead827f-6ca3-408b-9d3e-1f52146a2555", "value": "3072:NXj17Jo82I/GFSiPep063ec51hER2jPrCz:NXFLOPX8zxERWmz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778280913, "uuid": "aa4d5628-ece2-4ef8-82c3-da24ce0bc199", "value": 141604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280913, "uuid": "66e2dba0-dccf-4b0c-b81b-e8104796fb84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f96fa0c5-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778280914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "4ac3ccbd-8ff5-4630-a95e-8198951a5d9d", "comment": "Malware payload (Mirai)", "value": "7976aff21566f98b56cc9eea7af59c16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "2eeb8b51-a015-48ee-a0da-11b427177fe8", "comment": "Malware payload (Mirai)", "value": "d389796333d8218581bf9563dd5eb8b5bd5944d190337e401dfa987e93aa381c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "0b2b4e7c-9086-4cb7-b9db-62eb08d3df95", "value": "T1CEB34AD6F801DE7DFC0EDB7F4457050AB621A36216835F3A6757BE63BC310A46922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "856f4012-8b3f-406b-ab4a-be04f132bc87", "value": "1536:M/Fd8MNhs3SVr7fVnYMFgnzV2I1K8FFBGPtj6vpPc/rLU1BCuQJ0dOj0:GFd/GC/Vnrgn52I1bBe61KPuQJGOQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778280914, "uuid": "488cec32-594e-4e7b-928e-3fdd89b930b2", "value": 114956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "4a10b093-3fc5-4b4d-aa2d-7db034547a05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9809da1-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778280914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "b477d495-cc3f-494a-a444-64a83b84e8f6", "comment": "Malware payload (Mirai)", "value": "d4f08f1d9b4d9204d6f703d7d68d002c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "7535fa02-633c-4812-99d5-ea368f6c183d", "comment": "Malware payload (Mirai)", "value": "081ea15c1aca87e4999db87a6d157a116493ca4431a434f79ff8953e68e79c6d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "4022cee5-c703-4348-94cb-8db5e7a5e870", "value": "T126B32A86AC814A11C5D613BFF92E118D3313277CE3DE72129D205F2477CA96B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "17da9ae2-f20a-46e4-8613-3bb371fd4c5b", "value": "3072:BfxGIfE1qVXbO4bnOfGZKKajrfiIbVva4qWXCfuaM1kfxGg:iIfvlDDOeZKKa/iIbtancCgk5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778280914, "uuid": "d2cf67c1-98d5-402d-aeb3-298b82542019", "value": 116104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "c64f9276-47e9-4def-8ebc-0ab37006f50f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f999d6b5-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1778280914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "2cab2217-b010-4043-87d9-e450dac36367", "comment": "Malware payload (Mirai)", "value": "10a5b79d92d3ffa26a75e328eb011bce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "f203fe39-24d4-46c0-8912-d79f4649a672", "comment": "Malware payload (Mirai)", "value": "2de44ba31cb7107ac7ca78e056c2c3517f294215582e02febbc0c423831bf2f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "e82f968f-ca38-4c72-a504-e8b8f50748d2", "value": "T1E3936BC1E253E8F5ED1705751137E33B4B37F139102DDA97DBA8AA32BCA2600D5262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "078b7dc1-5bc3-467f-8d5d-d9d2c2c76467", "value": "1536:Lh+jn2+ifI/EIzRBIepUGzX+VCW+XpElUx02V7VKTiI3nPKxCdg71G+dkChCs:9+jn2tA/EIzPIepUG6VCPulo7VAiI3PI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1778280914, "uuid": "4ef319cb-3e1f-437f-82d8-7456d34cb5f8", "value": 91860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280914, "uuid": "1c8b4263-0ce9-4657-aae5-055eef90ff39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198429, "uuid": "ecbd0557-4a70-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.62:45180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198531, "uuid": "29e70387-4a71-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://skyvpns.enricher-exclam.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198538, "uuid": "2dbc8b82-4a71-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-markor.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198543, "uuid": "3091c402-4a71-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.65:56647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198546, "uuid": "324eb2a9-4a71-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vor-markor.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198781, "uuid": "beab0f42-4a71-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.0.200:51008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198836, "uuid": "df51fdaa-4a71-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1l07-dock.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778198899, "uuid": "04bc4178-4a72-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dbinsts.enricher-exclam.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199198, "uuid": "b711f98a-4a72-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ym04rg.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199202, "uuid": "b949ecd2-4a72-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://apidocs.enricher-exclam.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199499, "uuid": "6ad92eb4-4a73-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://stackcoupon.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199557, "uuid": "8d16c987-4a73-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://metalts.enricher-exclam.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199862, "uuid": "430daa73-4a74-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.62:45180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199915, "uuid": "6264f0c7-4a74-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://talfluxal6.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778199924, "uuid": "682b1fa5-4a74-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://talfluxal6.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200155, "uuid": "f1cbad12-4a74-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://osbases.enricher-exclam.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200218, "uuid": "174f9fbd-4a75-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelven4en.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200225, "uuid": "1b90ea35-4a75-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://kelven4en.baked5ham.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200397, "uuid": "82068000-4a75-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ziparks.alien2tedchisel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200573, "uuid": "ea815d88-4a75-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://rawdats.alien2tedchisel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200586, "uuid": "f2afa11e-4a75-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://kznyspcb.arch-vivarium.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200938, "uuid": "c429fb4d-4a76-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://volt4-stack.arch-vivarium.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778200998, "uuid": "e834043c-4a76-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.209.60:40592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201000, "uuid": "e9610acd-4a76-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://jobadms.alien2tedchisel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201295, "uuid": "994e7094-4a77-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://libsyss.alien2tedchisel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201356, "uuid": "bd8f5a3a-4a77-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://loagolden.arch-vivarium.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201663, "uuid": "7424705e-4a78-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ftpsrvs.alien2tedchisel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201840, "uuid": "ddea5462-4a78-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.65:56647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201946, "uuid": "1d0e97de-4a79-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://unhoq4.arch-vivarium.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201953, "uuid": "21798468-4a79-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://unhoq4.arch-vivarium.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778201963, "uuid": "274db036-4a79-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.243.242:53768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778202131, "uuid": "8b56adf8-4a79-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://uidmaps.alien2tedchisel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778202136, "uuid": "8e5ec7af-4a79-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvhubs.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778202140, "uuid": "90bc94b4-4a79-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.11.237:53857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778202386, "uuid": "235f7c06-4a7a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://webcdnx.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778202507, "uuid": "6baec190-4a7a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srcgets.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203098, "uuid": "cb856347-4a7b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://netapis.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203219, "uuid": "13f162cd-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://modbuss.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203227, "uuid": "18c8f005-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://modbuss.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203277, "uuid": "36b715c1-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvlogs.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203282, "uuid": "3940b944-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://srvlogs.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203452, "uuid": "9edb84b4-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pkgruns.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203523, "uuid": "c91f568d-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://devbits.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203523, "uuid": "c9290e72-4a7c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://devbits.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203758, "uuid": "55351f7b-4a7d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.11.237:53857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203813, "uuid": "75e31df5-4a7d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://extnets.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778203932, "uuid": "bcc43248-4a7d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://appboxs.6toralix.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204181, "uuid": "511f5c5f-4a7e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwrlogs.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204231, "uuid": "6f049c3e-4a7e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnswebs.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204241, "uuid": "74cec3b5-4a7e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://dnswebs.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204411, "uuid": "da844933-4a7e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.96:53548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204472, "uuid": "fe768529-4a7e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://domregs.comrade-dec1ine.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204545, "uuid": "2a85a5ce-4a7f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsruns.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204890, "uuid": "f803ef79-4a7f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpupros.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778204896, "uuid": "fbb0cdae-4a7f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://autboxs.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205200, "uuid": "b06d5757-4a80-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://refid-xs.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205200, "uuid": "b0e801ef-4a80-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsmgrs.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205201, "uuid": "b16cdb06-4a80-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://refid-xs.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205566, "uuid": "8aa6bea8-4a81-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://comwebs.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205736, "uuid": "f05182a6-4a81-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.71.150:35279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205856, "uuid": "375a9303-4a82-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://topsvcs.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205865, "uuid": "3cbcbf1e-4a82-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://topsvcs.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778205916, "uuid": "5baaff81-4a82-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://taskids.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206034, "uuid": "a1c6cf64-4a82-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitfoxs.mav1voren.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206160, "uuid": "ecf06cad-4a82-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ioflows.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206223, "uuid": "12781503-4a83-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.68:36691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206339, "uuid": "573f17d2-4a83-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.137:58775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206390, "uuid": "75c5f90e-4a83-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfixs.qen7larex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206696, "uuid": "2c45f795-4a84-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipnodes.qen7larex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206752, "uuid": "4dd9f499-4a84-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://syncits.residency5ilicat.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206758, "uuid": "513cac12-4a84-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.133.221:45675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206942, "uuid": "bebf1e83-4a84-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://doclabs.peat-scoop.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778206991, "uuid": "dc0cf7a2-4a84-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://getcfgs.qen7larex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778207232, "uuid": "6bdc75fc-4a85-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://envsets.peat-scoop.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778207298, "uuid": "92f63297-4a85-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.71.150:35279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778207413, "uuid": "d793efc6-4a85-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sslkeys.qen7larex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778207535, "uuid": "2024369e-4a86-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitkits.peat-scoop.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778207658, "uuid": "69838682-4a86-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshbins.qen7larex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778207869, "uuid": "e7c01aab-4a86-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://subclis.peat-scoop.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208069, "uuid": "5e8e7689-4a87-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpdirs.qen7larex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208140, "uuid": "894a9a5d-4a87-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://lanhops.peat-scoop.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208324, "uuid": "f6cdce61-4a87-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.123.97:58223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208391, "uuid": "1ecc0a40-4a88-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://cmdsets.2zorevin.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208448, "uuid": "40b29de0-4a88-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.133.221:45675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208690, "uuid": "d09a8d06-4a88-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://skyvpns.2zorevin.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208852, "uuid": "3190063c-4a89-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxyss.peat-scoop.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778208914, "uuid": "564f7e8b-4a89-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.208:50514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209037, "uuid": "9fd804aa-4a89-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dbinsts.2zorevin.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209093, "uuid": "c12380e6-4a89-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://optwebs.parliament5almon.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209221, "uuid": "0d14f897-4a8a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.101:35733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209395, "uuid": "7508be33-4a8a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.123.97:58223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209402, "uuid": "7926d06d-4a8a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://apidocs.2zorevin.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209582, "uuid": "e45e9e45-4a8a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://usrgrps.parliament5almon.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209750, "uuid": "4870b6db-4a8b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://vmlists.parliament5almon.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209756, "uuid": "4c0e470f-4a8b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://metalts.2zorevin.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778209879, "uuid": "9562b0a5-4a8b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.41:60277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778210115, "uuid": "2266ff05-4a8c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://osbases.2zorevin.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778210124, "uuid": "277ac0d1-4a8c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshpros.parliament5almon.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778210482, "uuid": "fcaba52d-4a8c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ziparks.tavro9xel.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778210531, "uuid": "1a71a28c-4a8d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcpcons.parliament5almon.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778210808, "uuid": "bf514a91-4a8d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://netmans.parliament5almon.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778210846, "uuid": "d6108f0d-4a8d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://rawdats.tavro9xel.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211021, "uuid": "3e4c44f7-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.131:35894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211134, "uuid": "8150c96d-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://jobadms.tavro9xel.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211141, "uuid": "860cade7-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://syskeys.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211142, "uuid": "861fb55d-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://syskeys.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211258, "uuid": "cb7da8f0-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.239.175:59288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211311, "uuid": "eb1b1ef6-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.1.156:50970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211312, "uuid": "eb8a0c7b-4a8e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.153.67.207:46247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211435, "uuid": "353cc5ad-4a8f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.208:50514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211490, "uuid": "55ec6e23-4a8f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://libsyss.tavro9xel.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211551, "uuid": "7a442314-4a8f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://webdocs.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211852, "uuid": "2d9dbd14-4a90-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://appsrch.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211858, "uuid": "312057b0-4a90-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ftpsrvs.tavro9xel.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778211922, "uuid": "5762d2fe-4a90-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.223.27:56757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212216, "uuid": "06bcec3d-4a91-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://uidmaps.tavro9xel.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212218, "uuid": "07aca1b5-4a91-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://logbins.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212522, "uuid": "bd09b4b6-4a91-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srcgets.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212573, "uuid": "db7cba44-4a91-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://apiopss.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212582, "uuid": "e0857c67-4a91-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.131:35894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212629, "uuid": "fc9888e5-4a91-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.153.67.207:46247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212811, "uuid": "690ef934-4a92-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.2.42:50445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212883, "uuid": "9412c1a6-4a92-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://modbuss.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778212931, "uuid": "b0dfd46b-4a92-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlabh.scornful-up.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213233, "uuid": "64c74ed6-4a93-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvhubs.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213241, "uuid": "698d84b2-4a93-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://srvhubs.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213302, "uuid": "8da7620e-4a93-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.239.175:59288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213415, "uuid": "d135c62a-4a93-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pkgruns.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213530, "uuid": "15ec58da-4a94-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://webcdnx.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213541, "uuid": "1bfd1ab8-4a94-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://webcdnx.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213601, "uuid": "401eb035-4a94-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://extnets.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213601, "uuid": "40353bb4-4a94-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://extnets.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213833, "uuid": "ca3967e7-4a94-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwrlogs.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778213891, "uuid": "ecbc9743-4a94-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://netapis.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214135, "uuid": "7e3fa495-4a95-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.2.42:50445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214135, "uuid": "7e8d2bd4-4a95-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.65.199:44369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214191, "uuid": "9fbd36b3-4a95-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvlogs.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214316, "uuid": "e9eff37e-4a95-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://domregs.xamir5ol.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214618, "uuid": "9e6f291d-4a96-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://devbits.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214618, "uuid": "9e741ead-4a96-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://autboxs.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214621, "uuid": "a049cde2-4a96-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://autboxs.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214670, "uuid": "bcf99680-4a96-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.54.114:51011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214741, "uuid": "e743f2cd-4a96-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:35610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778214922, "uuid": "532f8158-4a97-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://refid-xs.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215089, "uuid": "b71aacf1-4a97-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.255.127:36235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215153, "uuid": "dd3007ee-4a97-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://appboxs.dimchown.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215213, "uuid": "00fa99e7-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://comwebs.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215224, "uuid": "07295236-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://comwebs.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215280, "uuid": "28af96a8-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.168:57799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215394, "uuid": "6ca9ed98-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnswebs.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215400, "uuid": "70571a10-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://dnswebs.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215514, "uuid": "b46579f2-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://taskids.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215520, "uuid": "b7ad3bea-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.153:59618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215581, "uuid": "dc4933d6-4a98-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsruns.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215872, "uuid": "89b2ab6b-4a99-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpupros.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215875, "uuid": "8b37683d-4a99-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ioflows.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778215880, "uuid": "8e98d4d6-4a99-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpupros.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216171, "uuid": "3bec2d16-4a9a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://syncits.pav3mirex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216182, "uuid": "42a56948-4a9a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.49.95:50815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216293, "uuid": "84b6de3a-4a9a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsmgrs.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216421, "uuid": "d0cfc37f-4a9a-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.54.114:51011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216533, "uuid": "137fbf38-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://doclabs.mel6vator.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216543, "uuid": "1973756c-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.255.127:36235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216591, "uuid": "36484f8e-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://topsvcs.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216592, "uuid": "36c07b89-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.180.121:41524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216780, "uuid": "a6f11ec8-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.193.135:41185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216829, "uuid": "c4306429-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.180.121:41524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216893, "uuid": "ea220a3b-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://envsets.mel6vator.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216893, "uuid": "ea220db8-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitfoxs.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778216900, "uuid": "ee541747-4a9b-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitfoxs.mayservo.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217131, "uuid": "77c9e044-4a9c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.153:59618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217189, "uuid": "9ab94319-4a9c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitkits.mel6vator.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217314, "uuid": "e5023c4a-4a9c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfixs.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217326, "uuid": "ec85cec1-4a9c-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://hotfixs.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217492, "uuid": "4f151459-4a9d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://subclis.mel6vator.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217611, "uuid": "9660cddc-4a9d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.239:51061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217612, "uuid": "968a1ae4-4a9d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipnodes.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217735, "uuid": "e00166f0-4a9d-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.49.95:50815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217855, "uuid": "27674bb0-4a9e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://lanhops.mel6vator.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217912, "uuid": "49c04de2-4a9e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://getcfgs.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778217978, "uuid": "710fdf6b-4a9e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.1.156:50970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218092, "uuid": "b4a4a10d-4a9e-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.32.111:53810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218276, "uuid": "228971f1-4a9f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxyss.mel6vator.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218276, "uuid": "22b9ce99-4a9f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sslkeys.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218452, "uuid": "8b7c1f98-4a9f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.16.164.199:55697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218520, "uuid": "b4152dbd-4a9f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://optwebs.lorex7in.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218632, "uuid": "f6937e26-4a9f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshbins.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218632, "uuid": "f7054668-4a9f-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.119:55183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218757, "uuid": "41691c18-4aa0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.119:55183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218818, "uuid": "6577d127-4aa0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.65.199:44369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218935, "uuid": "ab700f86-4aa0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpdirs.ipsetsew.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778218941, "uuid": "aef701fb-4aa0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://usrgrps.lorex7in.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219240, "uuid": "60f3a875-4aa1-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://vmlists.lorex7in.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219297, "uuid": "833fd6e0-4aa1-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://cmdsets.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219306, "uuid": "889a668b-4aa1-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://cmdsets.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219424, "uuid": "ce9c7140-4aa1-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.168:57799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219537, "uuid": "124f9962-4aa2-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshpros.lorex7in.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219775, "uuid": "a0375eaa-4aa2-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://skyvpns.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778219897, "uuid": "e8e6f291-4aa2-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcpcons.lorex7in.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220081, "uuid": "56ab7ef3-4aa3-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://dbinsts.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220085, "uuid": "58dc6fc1-4aa3-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.237.173:47376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220136, "uuid": "7737580c-4aa3-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.122.72:48557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220196, "uuid": "9b370381-4aa3-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://netmans.lorex7in.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220447, "uuid": "30512ebb-4aa4-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://apidocs.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220623, "uuid": "99a00648-4aa4-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://syskeys.1navorex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220738, "uuid": "ddb8a8ed-4aa4-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://metalts.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220921, "uuid": "4b46ded5-4aa5-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://webdocs.1navorex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778220925, "uuid": "4d92db44-4aa5-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.246.153:43925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221043, "uuid": "93c31f84-4aa5-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:45235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221098, "uuid": "b4879aff-4aa5-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://osbases.modeall.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221103, "uuid": "b74d190b-4aa5-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:45235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221219, "uuid": "fcea8fdd-4aa5-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://appsrch.1navorex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221574, "uuid": "d0604ed8-4aa6-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://logbins.1navorex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221689, "uuid": "1494cf47-4aa7-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.237.173:47376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221698, "uuid": "1a0cb6b5-4aa7-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ziparks.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221815, "uuid": "601944f9-4aa7-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://rawdats.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221876, "uuid": "84594da7-4aa7-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://apiopss.1navorex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778221885, "uuid": "89a666e8-4aa7-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.123.40:53437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222121, "uuid": "161afa3f-4aa8-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://jobadms.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222129, "uuid": "1b3bc9dd-4aa8-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://jobadms.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222232, "uuid": "584fdaed-4aa8-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlabh.1navorex.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222241, "uuid": "5d94ea6c-4aa8-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.161.240:41488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222358, "uuid": "a38f2086-4aa8-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://libsyss.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222481, "uuid": "ed152cef-4aa8-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://optwebs.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222537, "uuid": "0e0ec147-4aa9-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.23.214:43134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222775, "uuid": "9c0e47ab-4aa9-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://ftpsrvs.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778222846, "uuid": "c696978d-4aa9-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://usrgrps.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223077, "uuid": "50521f6f-4aaa-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://uidmaps.addport.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223196, "uuid": "9722f9be-4aaa-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://vmlists.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223206, "uuid": "9cd492b8-4aaa-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmlists.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223447, "uuid": "2c72dd49-4aab-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://srcgets.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223501, "uuid": "4ce37581-4aab-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.135.50:60076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223620, "uuid": "941c3ba4-4aab-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshpros.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223733, "uuid": "d762d73a-4aab-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://modbuss.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223857, "uuid": "20d149bd-4aac-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcpcons.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778223983, "uuid": "6c609b4f-4aac-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.161.240:41488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224005, "uuid": "7965dc73-4aac-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.161.40:49597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224036, "uuid": "8b9f87c8-4aac-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pkgruns.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224218, "uuid": "f85feaaf-4aac-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://netmans.ipfspie.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224577, "uuid": "cdffe959-4aad-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://extnets.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224586, "uuid": "d3d4e823-4aad-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://extnets.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224633, "uuid": "efa1de7e-4aad-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://syskeys.vbytetap.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224753, "uuid": "376a4c16-4aae-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.140.192:39227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224879, "uuid": "822eaa73-4aae-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwrlogs.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224883, "uuid": "84940c0c-4aae-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.251.41:52159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778224933, "uuid": "a2318de4-4aae-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://webdocs.vbytetap.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225280, "uuid": "717a2786-4aaf-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://appsrch.vbytetap.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225472, "uuid": "e37a3dc2-4aaf-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://domregs.gzipsea.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225592, "uuid": "2b08b574-4ab0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://logbins.vbytetap.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225602, "uuid": "315f1c79-4ab0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.135.50:60076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225664, "uuid": "55dac5d1-4ab0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://autboxs.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225904, "uuid": "e504d1ec-4ab0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://refid-xs.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778225934, "uuid": "f6e5a718-4ab0-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://apiopss.vbytetap.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226325, "uuid": "e01730bd-4ab1-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://comwebs.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226345, "uuid": "ec023c81-4ab1-11f1-934f-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlabh.vbytetap.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226823, "uuid": "091055c3-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://taskids.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226833, "uuid": "0edc8ed0-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://taskids.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226910, "uuid": "3d1b40b6-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ioflows.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226972, "uuid": "61ff0eeb-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://zijas.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778226980, "uuid": "666baf81-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://zijas.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227214, "uuid": "f1c790df-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://syncits.ratmedia.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227265, "uuid": "1035e8a2-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.140/files/7048186296/lVCwWP2.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227265, "uuid": "108cedd2-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.129.10/bins/kaf.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227269, "uuid": "12c7cb58-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumlithen.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "355a35f3-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/Pjibf.exe", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "359883b9-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/security", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "35a735a9-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/module", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227327, "uuid": "35a73c3c-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/elevator", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227330, "uuid": "37608fec-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/RuntimeBroker.exe", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227331, "uuid": "37d8ac00-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/component", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227339, "uuid": "3cbf3c0c-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://whpayment.ru/files/jar/module2", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227575, "uuid": "c96fbcf9-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://doclabs.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227576, "uuid": "c988d542-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0n3-wave.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227817, "uuid": "59933cb0-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.36.151:56032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227871, "uuid": "79c846cb-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://envsets.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778227941, "uuid": "a34c9a4f-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkfluxum.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228173, "uuid": "2d903dfc-4ab6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://private2-port.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228290, "uuid": "7329752e-4ab6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitkits.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228542, "uuid": "095b32d5-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://stea-summ.5toravex.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228652, "uuid": "4ae551c6-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://subclis.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228953, "uuid": "fe5a1c46-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lanhops.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228953, "uuid": "fe7540d7-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://layoutamp.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778228960, "uuid": "02a7d81c-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://lanhops.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229137, "uuid": "6c73da70-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.36.151:56032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229138, "uuid": "6d0951a5-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.73:35160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229322, "uuid": "da62e9b1-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://xmz60xrj.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229324, "uuid": "db96c12b-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxyss.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229326, "uuid": "dcebd33e-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://xmz60xrj.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229444, "uuid": "232f309d-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.233.235.231:10535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229608, "uuid": "84c1408f-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.40.31.143/013112017617.PhP", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229609, "uuid": "85ca7e6a-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.40.31.143/img/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229622, "uuid": "8d35fa0d-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.40.31.143/img/ham/img_182056.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229622, "uuid": "8d3df965-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.40.31.143/img/hio/img_205611.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229622, "uuid": "8d56beb9-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://3awswdxc.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778229924, "uuid": "413affcb-4aba-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vinespr.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778230340, "uuid": "39082bf1-4abb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://genomecatalog.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778230399, "uuid": "5c2bc4f9-4abb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.100:50953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778230635, "uuid": "e8ee4f35-4abb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://routercircuit.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778230641, "uuid": "ec690efb-4abb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://routercircuit.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778230999, "uuid": "c1cb62ae-4abc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://flame-reage.mav2lorix.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231350, "uuid": "9346432b-4abd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://solar-sanat.net/imagetest001.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231350, "uuid": "936e1410-4abd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://invoimeado.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231365, "uuid": "9c174bc8-4abd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://invoimeado.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231437, "uuid": "c7149f8b-4abd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.204.126:33480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231658, "uuid": "4ad37372-4abe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.100:50953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778231957, "uuid": "fcdd3478-4abe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.60:59213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232012, "uuid": "1db6bc21-4abf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://yslgmz.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232315, "uuid": "d277efe1-4abf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vortide7en.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232487, "uuid": "393d9481-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ozaltuntel.xyz/catt/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232489, "uuid": "39e7b6d3-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ozaltuntel.xyz/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232491, "uuid": "3b174934-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ozaltuntel.xyz/masabik/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232678, "uuid": "aaa61877-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.245:48522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232680, "uuid": "abfdac7e-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://quorvalea5.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778232682, "uuid": "ad458005-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorvalea5.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233145, "uuid": "c130c727-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/11/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233145, "uuid": "c136e4bd-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/2/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233145, "uuid": "c1374d3e-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/8/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233145, "uuid": "c151424a-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/6/1217.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c179799f-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/10/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c17982e4-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/8/7782.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1798466-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/7/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c179972b-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/3/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1a21ef1-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/9/18241.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1a225da-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/11/2048.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1a23cf3-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/3/11987.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1a24734-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/5/2640.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1ab6656-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/7/25091.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1cfb1f3-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/2/303.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233146, "uuid": "c1e94ae8-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/4/24282.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233157, "uuid": "c86fb63f-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.251:46680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233160, "uuid": "ca1467e6-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/9/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233160, "uuid": "ca21f5d9-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/5/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233160, "uuid": "ca2ecfb3-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/6/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233160, "uuid": "ca3d4c10-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/4/n.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233160, "uuid": "ca498fee-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.190/10/4656.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233211, "uuid": "e835aad0-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/V2BIqXDFGxz4.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233211, "uuid": "e8491f6a-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/XvQVQruNPnzM.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233211, "uuid": "e849f620-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://id89652.cfd/uploads/aYImqF0B9zN4.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233211, "uuid": "e84af89a-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/aYImqF0B9zN4.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233211, "uuid": "e8639f89-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/4WYz1GcVBwZd.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233211, "uuid": "e89f8b83-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://id89652.cfd/uploads/XvQVQruNPnzM.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233214, "uuid": "ea6a0210-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://id89652.cfd/uploads/4WYz1GcVBwZd.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233215, "uuid": "eacb7872-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://68uvag.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233222, "uuid": "ef193a24-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/RIuBqY6b3GgC.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233268, "uuid": "0a393797-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/RUN_x64.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233268, "uuid": "0abde051-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/RUN_x32.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233463, "uuid": "7e9c4f9f-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://crestdeliv.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233633, "uuid": "e3fc9e9c-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsk.qen8vorel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233638, "uuid": "e732f5eb-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.64.100:46843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778233931, "uuid": "956f037c-4ac3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-fluxen.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234053, "uuid": "de5e3976-4ac3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://aobgz.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234112, "uuid": "017bb3ab-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://jobhunters.ly/images/KGByBXnnAn178.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234112, "uuid": "017d57e1-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://jobhunters.ly/images/Eftertnd.asd", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234124, "uuid": "08eba32f-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://nmturc.cyou/match/img_130250.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234168, "uuid": "22a3a52f-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.60:59213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234169, "uuid": "2394a5d4-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.105.198:53321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234360, "uuid": "958b7d6f-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://windharbor.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234361, "uuid": "95cb4f1e-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.135.153:37117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234480, "uuid": "dd1ca01c-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/svdsdadsad/vcxv/raw/0878bd481def8e71bb56b5f565d625a755d00281/1.jpg", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234589, "uuid": "1dbb492e-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/solid-23/hg/refs/heads/main/AknSdkr.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234591, "uuid": "1ed65790-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/solid-23/jame/refs/heads/main/iakkoaj.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234651, "uuid": "42f24152-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.28.212:53166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234652, "uuid": "43a67fd5-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dfsdf.sixbaud.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234774, "uuid": "8c2a1436-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://wz08rx0.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778234782, "uuid": "90db9c0c-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://wz08rx0.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235016, "uuid": "1c238699-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://apiass.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235072, "uuid": "3d81a95b-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hs01.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235311, "uuid": "cc667029-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://4vxdasln.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235322, "uuid": "d2cd6d44-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://4vxdasln.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235322, "uuid": "d2cd8524-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://st0n-beam.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235324, "uuid": "d3a94375-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.188.117:53314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235324, "uuid": "d3c83ebd-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://st0n-beam.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235368, "uuid": "ee1055fa-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/1bbd7cd5392f2cd4_264.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235381, "uuid": "f5ed371c-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/4fe4008aa7fff8c6_264.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235427, "uuid": "113752c3-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/5a286063ecc09f8f_264.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235487, "uuid": "35486252-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/64a7ffd2030af46a_264.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235501, "uuid": "3d66fe9d-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/uploads/7b5d5a8a45b32867_264.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235613, "uuid": "80165412-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ound-span.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235622, "uuid": "8574e6c3-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.64.100:46843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235674, "uuid": "a4c2d7b8-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://kdffa87z.1zarelin.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235691, "uuid": "ae6cfe39-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://xxxzxxxzxxx.cc/flomo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235728, "uuid": "c4bfff0e-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://254.182.153.160.host.secureserver.net/CwTkHh54/CwTkHh54mde2/mzb412.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235729, "uuid": "c58bb28c-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.28.212:53166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235789, "uuid": "e8d9314f-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.135.153:37117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235845, "uuid": "0abebc56-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/airkanpang/bientianlp/main/dsgrlnihdsfrg.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235845, "uuid": "0abf9616-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/airkanpang/bientianlp/main/mkgyhhuihfyjyufkuik.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235910, "uuid": "318601ce-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.105.198:53321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778235971, "uuid": "55d9279a-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-d0ck.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236097, "uuid": "a0e5e2f7-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://5bzb.tavro6xen.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236286, "uuid": "11554073-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://neuraldepot.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236388, "uuid": "4e6e3f8f-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/imgoilandgasss.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236391, "uuid": "4fe4941e-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://tradedsglobal.com/rumpfornew.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236395, "uuid": "5241df88-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://tradedsglobal.com/obomay.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236395, "uuid": "5268a762-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://svcd.tavro6xen.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236403, "uuid": "570e2022-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://tradedsglobal.com/yufornewpanel.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236456, "uuid": "76bea990-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://andjemztech.com/pp/img_035646.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236583, "uuid": "c2835694-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-ff1914891a3e4ac9911682a004158d63.r2.dev/LogMeInResolve_Unattended.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236631, "uuid": "df18f34e-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sort4-mesh.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236636, "uuid": "e2320d44-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumspireen1.5toravex.lat//kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236692, "uuid": "0387009a-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.129:46170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236701, "uuid": "087e9624-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://nmturc.cyou/Senior4/img_101400.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236759, "uuid": "2b0fd34c-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.188.117:53314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236873, "uuid": "6ef97077-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.83.93:54612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236941, "uuid": "980a2e5a-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.249.188:46928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236942, "uuid": "98249126-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.87:33301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778236992, "uuid": "b6288204-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvetcalm.5toravex.lat//kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237052, "uuid": "d9ec6897-4aca-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cgkeayqe.brand5calpel.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237289, "uuid": "67182386-4acb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.242:52005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237353, "uuid": "8d4670a6-4acb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://tridraar.xamir4al.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237413, "uuid": "b14028d2-4acb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://yz8pj.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237416, "uuid": "b32a712e-4acb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.36.4:44817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237770, "uuid": "85fdc171-4acc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cove-sdk.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237833, "uuid": "abae247e-4acc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.87:33301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778237842, "uuid": "b0d763d1-4acc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://aligncolu.xamir4al.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238019, "uuid": "1a4832da-4acd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://serforge8en.xamir4al.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238076, "uuid": "3c80e315-4acd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.129:46170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238081, "uuid": "3ef9a792-4acd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0ad-hold.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238319, "uuid": "cd5ea7de-4acd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.230.35:56063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238430, "uuid": "0f7d5e8f-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sh4do-phase.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238672, "uuid": "9fa13bd6-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://aesgauji.sorix1ar.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238678, "uuid": "a3617743-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.83.93:54612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238799, "uuid": "eb4a7415-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-c4sua.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "ec104c22-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/arm", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "ec106a79-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/arm7", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "ec106ce2-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/wget.sh", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "ec106e47-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/mips", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "ec106f4b-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/mpsl", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238800, "uuid": "ec107d37-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/x86", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "ec1bccc4-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/arm6", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "ec214c9c-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.36/bins/arm5", "Tag": [ { "name": "176-65-139-36", "colour": "#2f14cd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238801, "uuid": "ec341796-4ace-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.45/iran.mipsrouter", "Tag": [ { "name": "176-65-139-45", "colour": "#1bea05", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238853, "uuid": "0b7a11b4-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://xvinmbn2.sorix1ar.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778238979, "uuid": "5669e22a-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.33.151:52642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239036, "uuid": "787f4322-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.167/toto.sh", "Tag": [ { "name": "176-65-139-167", "colour": "#4653f7", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239037, "uuid": "791366a0-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.174/x", "Tag": [ { "name": "176-65-139-174", "colour": "#54adaf", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239038, "uuid": "79b6f6c0-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/manji.arm5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239092, "uuid": "99c7a772-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldefer.sorix1ar.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239151, "uuid": "bccb938d-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://gene-pod.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239222, "uuid": "e794ef79-4acf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.205:52659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239453, "uuid": "713bf568-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://yv1v.di7ectkoshevoy.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239514, "uuid": "954cd8cd-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://5fp3.sorix1ar.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239524, "uuid": "9b21517f-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.183.232:39227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239524, "uuid": "9b2e2e9e-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.84:39926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239814, "uuid": "4854fda5-4ad1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-shel.sorix1ar.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778239818, "uuid": "4ab205ef-4ad1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://arraydar.lomov-stroganal.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240174, "uuid": "1e89ffb7-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://carrie-branch.7doreval.lat/kl0n-green-excel-yy3775-get65/gett3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240232, "uuid": "413c8a7b-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://circuit-scope.lomov-stroganal.lat/sh1ne-logs-neppy-upd8335-www3/get123c.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240362, "uuid": "8f0b91f0-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://kptc.xamir4al.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240418, "uuid": "b043e75c-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.84:39926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240477, "uuid": "d328132e-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://clip3-stream.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240655, "uuid": "3d572d34-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://runwayclini.xamir4al.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240725, "uuid": "6739ef1b-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.33.151:52642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240903, "uuid": "d15b54f3-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.108.110:40003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240906, "uuid": "d30b4264-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://am6xg75.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240955, "uuid": "f0403140-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.207:42613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240957, "uuid": "f172d8a2-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://fallverify.pav9mirel.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778240961, "uuid": "f3e81c34-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://fallverify.pav9mirel.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241198, "uuid": "8127ad66-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://catal0-trail.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241200, "uuid": "82713761-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.125.68:58093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241258, "uuid": "a4c95f8e-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://quercanv.pav9mirel.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241373, "uuid": "e9ab94e6-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://uvxh0h1f.ethen0shypnotist.digital/?ublib=vMCoBgfKevpMYMIQ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241436, "uuid": "0f004dc3-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.129.150:33040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241496, "uuid": "32bc8839-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://silv3r-flow.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241506, "uuid": "38917ef3-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://silv3r-flow.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241564, "uuid": "5b1afaaf-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.96.68:55621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241620, "uuid": "7c916576-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lofr.pav9mirel.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241860, "uuid": "0b739f37-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://9jp4c.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241920, "uuid": "2f52e3d3-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-nexa.pav9mirel.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778241928, "uuid": "3421c355-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://vel-nexa.pav9mirel.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242097, "uuid": "99152cb4-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-bann.byerottin8.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242336, "uuid": "27722e8d-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://yaso.su/raw/5ljRfCUO", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242339, "uuid": "294c9a3b-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://fram-branch.byerottin8.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242395, "uuid": "4a9bc0f7-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://catalogo.castrouria.com/c84da/bl.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242400, "uuid": "4d76686b-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lab-mark.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242452, "uuid": "6c7ebc46-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://wayradigitalmusic.com/vs/bst.vbs", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242453, "uuid": "6ceddf1d-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://catalogo.castrouria.com/a9f88b/rc.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242453, "uuid": "6cf38e4d-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://wayradigitalmusic.com/vs/CZ1290078882100-8261001.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242453, "uuid": "6cfbc285-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://wayradigitalmusic.com/vs/RC07833082771003-003281.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242461, "uuid": "71bd4446-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.108.110:40003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242636, "uuid": "da7646d1-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcng.buckish-nabere.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242707, "uuid": "045740f4-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://7onw.byerottin8.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242811, "uuid": "42a0e714-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.31.142.221/hFkkIhF.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242875, "uuid": "68d7e8c8-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=16VdIv3B_QeQ-uwbxjpa-rpkSv7l9pqkp", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242875, "uuid": "68d804f5-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1lZf1GfBQ3YFNQ90TLiWJiO1Qwaq-cp0z", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242882, "uuid": "6cc3cacb-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.249.16/01/eAmbkFo.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242887, "uuid": "6fe6c21e-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://rmxuj8se.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778242948, "uuid": "943ffe84-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.207:42613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243177, "uuid": "1c9fa4a1-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-n4rro.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243294, "uuid": "625c3a24-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.sensio.no/CuringLined", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243295, "uuid": "62bbabc4-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://qulxjkdn.byerottin8.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243305, "uuid": "68bf2d06-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.96.68:55621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243346, "uuid": "819c3b6c-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://yaso.su/raw/niihmz40", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243482, "uuid": "d2a0a528-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://jm7xf.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243484, "uuid": "d3899819-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenspirea.byerottin8.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243527, "uuid": "ed5564a2-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://mivventi.com/morgreport/brinamI.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243658, "uuid": "3b6753f9-4ada-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lianagomes.com.br/wp-content/themes/twentytwentytwo/ccb/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243662, "uuid": "3e018bc1-4ada-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://1vz4le.airport-clar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243674, "uuid": "44a6006f-4ada-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://1vz4le.airport-clar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243724, "uuid": "62f04b6a-4ada-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://abc.3bcs.cn/wp-admin/css/colors/vbv/blacksheep/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243846, "uuid": "ab9a18fa-4ada-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.15.71:58270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778243898, "uuid": "ca897f6c-4ada-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-array.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244021, "uuid": "1397ff81-4adb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelmeshon.airport-clar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244139, "uuid": "5a5abb3f-4adb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bgkdrlm.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244156, "uuid": "6459ee40-4adb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://bgkdrlm.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244320, "uuid": "c631e181-4adb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://9rehfapi.airport-clar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244433, "uuid": "099756c4-4adc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.125.68:58093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244434, "uuid": "0a1854f3-4adc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.8:60329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244434, "uuid": "0a302c5f-4adc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.214.57.210:38583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244497, "uuid": "2f343f4f-4adc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://importdeep.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244506, "uuid": "35109116-4adc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://importdeep.sprutte5t.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778244689, "uuid": "a2103044-4adc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.214.57.210:38583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245112, "uuid": "9e298242-4add-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.233.39.219:48916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245157, "uuid": "b8acadfb-4add-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://rougcurio.airport-clar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245166, "uuid": "be42136b-4add-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://emuw.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245166, "uuid": "be544511-4add-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://emuw.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245336, "uuid": "23a52cc4-4ade-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://v28e.assonanceka1e.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245464, "uuid": "6ff0037d-4ade-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.3.67:49538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245519, "uuid": "90da6648-4ade-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://mistcin.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245698, "uuid": "fb3e41ac-4ade-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://aa63qt.assonanceka1e.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245770, "uuid": "25f576f0-4adf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.3.67:49538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245876, "uuid": "65650a7b-4adf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://zentideis4.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778245996, "uuid": "acc8370f-4adf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lz9di.assonanceka1e.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246121, "uuid": "f7877406-4adf-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmdock.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246358, "uuid": "84ae39ee-4ae0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://runw4y5-spark.assonanceka1e.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246483, "uuid": "cf838fb4-4ae0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.15.71:58270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246535, "uuid": "ee726495-4ae0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-5cene.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246661, "uuid": "39236505-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-s3cur.assonanceka1e.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246777, "uuid": "7e2bb549-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.44.179:50933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246790, "uuid": "86d57c02-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://trilineon.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246793, "uuid": "87c4d161-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://trilineon.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778246952, "uuid": "e6fcbfee-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://printposte.colonist-proph.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247137, "uuid": "554a0549-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.239.201:55926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247207, "uuid": "7e774f97-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://reviewgard.priesthood-in.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247379, "uuid": "e56f10ff-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://podcamoss.colonist-proph.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247438, "uuid": "087b246f-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://balancebold.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247691, "uuid": "9f3fad41-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ark-vena.colonist-proph.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247797, "uuid": "de9c3eee-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://insightmemo.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247803, "uuid": "e1c94445-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://insightmemo.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778247977, "uuid": "499fb61c-4ae4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://arnnav.colonist-proph.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248161, "uuid": "b7700630-4ae4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://byi4cjm.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248341, "uuid": "22a06154-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.217.0:42796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248513, "uuid": "89207fae-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sermarkal8.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248573, "uuid": "acced9a0-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://fclmwfzz.colonist-proph.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248581, "uuid": "b1789e16-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.200.81.53:44147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248581, "uuid": "b1f3d5cc-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://fclmwfzz.colonist-proph.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248638, "uuid": "d3a85dad-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.233.39.219:48916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248640, "uuid": "d4eb6d43-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.140/files/6099399783/sie4JuH.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248641, "uuid": "d53b2308-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.157.233.103/phantom.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248817, "uuid": "3e325a90-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://itage.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248822, "uuid": "41a83c44-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://extractrela.audiheadboa7d.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778248990, "uuid": "a5383c78-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://25smp.audiheadboa7d.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249004, "uuid": "adce8731-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.239.201:55926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249004, "uuid": "adce9db0-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://25smp.audiheadboa7d.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249187, "uuid": "1b0b1f95-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-rel.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249354, "uuid": "7e3f5931-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-lithon.audiheadboa7d.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249541, "uuid": "edec1496-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.120.78/Dq0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249541, "uuid": "edfa8852-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.120.78/460g", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249541, "uuid": "ee0e2b60-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.120.78/ELe", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249541, "uuid": "ee213e22-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.120.78/T5M", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249541, "uuid": "ee3be0c3-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.120.78/hGn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249542, "uuid": "ee516e15-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.120.78/bf6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249545, "uuid": "f095397b-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://eyahy.expo5ejouer.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249651, "uuid": "2f9ea831-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://slate1-pulse.audiheadboa7d.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249827, "uuid": "98afdc30-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.109.55.181:8181/api/autoit-exe?t=af0231313f5c45e4a040832b420953fd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249828, "uuid": "990a9951-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.109.55.181:8181/api/autoit-dat?t=af0231313f5c45e4a040832b420953fd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249831, "uuid": "9ad0d549-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://mount9-crest.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778249890, "uuid": "be19c4aa-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://wmail.dsdmpu.gov.za/owa/auth/Current/TB.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250016, "uuid": "093d0768-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vordrais9.audiheadboa7d.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250023, "uuid": "0d0257a4-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.249.10.169/img_094219.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250023, "uuid": "0d0e06ef-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://updatedserverrr.io/MSI_133323.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250081, "uuid": "2fd7b2e8-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://254.182.153.160.host.secureserver.net/H29d63/H29d63mde2/PqpNF692.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250129, "uuid": "4c6c14cd-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1Eu5cYTpSDMnOHtb-qSbiPPdmLIfWuusZ", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250186, "uuid": "6e2b8a31-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.169.194.40/S7yhd67/buggypassage.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250202, "uuid": "77d3f2f5-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ws11.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250202, "uuid": "780ddd1d-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://1ws11.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250246, "uuid": "921cea82-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.169.194.40/S7yhd67/adhesivewipe.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250246, "uuid": "921d8e18-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.169.194.40/S7yhd67/madlybibliography.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250249, "uuid": "93d9247c-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.152:55876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250260, "uuid": "9a75cd27-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.169.194.40/S7yhd67/sleepforebear.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250376, "uuid": "df9d1182-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://shapegeyse.centrifuge-four.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250495, "uuid": "268b0034-4aea-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://irfw.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250621, "uuid": "71c13818-4aea-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.129.150:33040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250671, "uuid": "8fb35f80-4aea-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://quor-draet.centrifuge-four.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250851, "uuid": "fa96614d-4aea-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://grim-wave.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778250982, "uuid": "49140109-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://audi-vector.centrifuge-four.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251100, "uuid": "8f140075-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.209.231:38297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251156, "uuid": "b067bfdd-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.152:55876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251156, "uuid": "b07284ea-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://shapegate.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251514, "uuid": "85bc5614-4aec-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://x9hs.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251645, "uuid": "d4360fe5-4aec-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://reef7-line.centrifuge-four.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251816, "uuid": "39c64025-4aed-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://tvqib.centrifuge-four.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251871, "uuid": "5a8e5f1a-4aed-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dptfcl.rataj-vertky.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778251989, "uuid": "a1431cf2-4aed-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-carg0.skewedencro2ch.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252114, "uuid": "ebda0121-4aed-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-fluxix.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252300, "uuid": "5a50e81a-4aee-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.101.252:60189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252300, "uuid": "5a5cfdab-4aee-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.36:39598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252591, "uuid": "07d8701f-4aef-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.174:34779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252650, "uuid": "2ae7a908-4aef-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://kekie27.skewedencro2ch.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252782, "uuid": "7980533e-4aef-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.173:47204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778252835, "uuid": "99516542-4aef-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://5torm-sync.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253016, "uuid": "056c042f-4af0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://efk47wb3.skewedencro2ch.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253017, "uuid": "05a0135a-4af0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://howgsr7.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253077, "uuid": "2997ead3-4af0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.202.79:44678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253365, "uuid": "d57df105-4af0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cqkjo.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253366, "uuid": "d58798f6-4af0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://gwq4.skewedencro2ch.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253370, "uuid": "d844dffc-4af0-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://gwq4.skewedencro2ch.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253858, "uuid": "fb427533-4af1-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-4sh.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778253995, "uuid": "4cf836b5-4af2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelspire4en.skewedencro2ch.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254151, "uuid": "a9c6e2b5-4af2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lfvkqfz.diesel-stark.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254219, "uuid": "d230f4ee-4af2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalcampaign.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254225, "uuid": "d58f77a5-4af2-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://finalcampaign.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254327, "uuid": "1259e568-4af3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.140/files/1781548144/FYr2gXE.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254344, "uuid": "1c97f0ba-4af3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.161.40:49597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254345, "uuid": "1d10b487-4af3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.15.174:47964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254399, "uuid": "3d6bfedb-4af3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.189:44218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254521, "uuid": "861b269b-4af3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://harrain.diesel-stark.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254631, "uuid": "c7f37435-4af3-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://859wyr.porukau8ar.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254756, "uuid": "1265b1ea-4af4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.112.178:51399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254756, "uuid": "126b3b23-4af4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.13.144:33721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254932, "uuid": "7b6f8c4d-4af4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynline1a.diesel-stark.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778254941, "uuid": "806978c5-4af4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-defe.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255051, "uuid": "c2049c08-4af4-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.112.178:51399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255234, "uuid": "2f2c0ab3-4af5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://zhe9.diesel-stark.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255290, "uuid": "509cc8ba-4af5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://oak-branch.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255301, "uuid": "5719c4e1-4af5-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.127:35220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255590, "uuid": "03977938-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sh1e1d8-trail.diesel-stark.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255597, "uuid": "07b7b78e-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.15.174:47964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255652, "uuid": "286635e2-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://komv9kg.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255716, "uuid": "4e8986e0-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.80.69:37703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255897, "uuid": "ba1cef0f-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.189:44218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255953, "uuid": "db9f1d82-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sceneform.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255954, "uuid": "dc55574f-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynmarka.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778255960, "uuid": "dfe35cf3-4af6-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://dynmarka.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256254, "uuid": "8f6c038a-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256254, "uuid": "8f6c05c6-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256315, "uuid": "b3444618-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hjdssxth.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256319, "uuid": "b616523e-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://amrl.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256324, "uuid": "b8c7ffba-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://hjdssxth.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94c8cef-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94c9f6a-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94cc05c-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94cea2b-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94d06b5-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94d0eb6-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b94d2e7b-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b957c7e1-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256325, "uuid": "b963bd1e-4af7-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.23/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256671, "uuid": "879bd831-4af8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://unx7.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778256680, "uuid": "8d0afe2c-4af8-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ascfholn.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257028, "uuid": "5cacc84a-4af9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://c3353u83.peddler-wasting.digital/?ublib=pHpAwAlzaCJtsVhP", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257032, "uuid": "5eaed4c8-4af9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://triven1os.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257039, "uuid": "635d0223-4af9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://triven1os.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257092, "uuid": "82e21efa-4af9-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://pasturepal.swimsuit-unable.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257341, "uuid": "170fe7a8-4afa-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://biomesha.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257343, "uuid": "182e66ac-4afa-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://biomesha.salvat5pozar.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257452, "uuid": "596c537b-4afa-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://outer8-signal.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257641, "uuid": "ca2b6c95-4afa-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://layersun.scient-telograyka.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257813, "uuid": "30b436be-4afb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumnex0or.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257822, "uuid": "359cca38-4afb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://lumnex0or.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778257997, "uuid": "9dd4d424-4afb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://norflux9ar.scient-telograyka.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258113, "uuid": "e33e7cda-4afb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://factima.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258124, "uuid": "ea0831de-4afb-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://factima.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258357, "uuid": "746d442b-4afc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hf0gzeo.scient-telograyka.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258492, "uuid": "c4e8c071-4afc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://rgdqy.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258589, "uuid": "ff3ae2ba-4afc-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://7mnkjpr.scient-telograyka.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258592, "uuid": "00905e55-4afd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.25.85:47718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258833, "uuid": "90689119-4afd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://c52ih.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778258950, "uuid": "d668a9e4-4afd-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.251.41:52159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259021, "uuid": "0046eb7a-4afe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.249.188:46928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259021, "uuid": "0064f7a4-4afe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.208:57969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259166, "uuid": "56e8f56f-4afe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://circuit-scope.lomov-stroganal.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259253, "uuid": "8ad151e2-4afe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://organiquot.scient-telograyka.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259327, "uuid": "b695bd7a-4afe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://yv1v.di7ectkoshevoy.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259443, "uuid": "fc23a90b-4afe-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvhubs.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259627, "uuid": "69d7c89e-4aff-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://gene-pod.di7ectkoshevoy.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259670, "uuid": "83223743-4aff-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://webcdnx.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259685, "uuid": "8c1f947f-4aff-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:39956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259863, "uuid": "f62870c3-4aff-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://netapis.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259912, "uuid": "13c61f57-4b00-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvhubnode.cereal5pesivet.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778259921, "uuid": "19084d4e-4b00-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://srvhubnode.cereal5pesivet.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260028, "uuid": "58bcb624-4b00-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.158.68:35480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260087, "uuid": "7be986da-4b00-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://srvlogs.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260092, "uuid": "7f0da744-4b00-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvlogs.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260229, "uuid": "d03cf117-4b00-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://webcdnstat.cereal5pesivet.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260391, "uuid": "31350a6d-4b01-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://devbits.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260455, "uuid": "5743cd7a-4b01-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://netapiprot.cereal5pesivet.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260462, "uuid": "5b63e73e-4b01-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://netapiprot.cereal5pesivet.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260577, "uuid": "a01a08b1-4b01-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:33317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260581, "uuid": "a22d481c-4b01-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.223.227:41303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260695, "uuid": "e647352a-4b01-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.110.174:47311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260820, "uuid": "309cd66f-4b02-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://appboxs.dreamer5hrew.lat/kl0re-best34kjfeen-fmmexcel-wr3775-on75/on3.verification", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260822, "uuid": "31d1ab94-4b02-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvlogview.cereal5pesivet.lat/shednndce-looge-hronospp-up83sds35-onboard/wverif.camp", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260993, "uuid": "97b7977e-4b02-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.223.57:43980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778260998, "uuid": "9abd92ac-4b02-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnswebsrvs.radio-technic.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261020, "uuid": "a8008a31-4b02-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnswebs.comforter-panel.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261241, "uuid": "2bebacbe-4b03-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.172.135:54348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261292, "uuid": "4a3c95d4-4b03-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsruns.comforter-panel.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261352, "uuid": "6db23557-4b03-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsrunproc.radio-technic.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261539, "uuid": "dd1c227b-4b03-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.158.68:35480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261591, "uuid": "fc24de17-4b03-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpupros.comforter-panel.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261653, "uuid": "216814a4-4b04-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpuprosmgr.radio-technic.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261893, "uuid": "b0041159-4b04-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsmgrs.comforter-panel.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778261897, "uuid": "b296079e-4b04-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsmgrsvcs.radio-technic.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262195, "uuid": "648e66f5-4b05-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://topsvcs.comforter-panel.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262197, "uuid": "65532454-4b05-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://topsvcutil.radio-technic.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262201, "uuid": "67b7f595-4b05-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.182.235:45690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262256, "uuid": "88c7522a-4b05-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.110.174:47311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262444, "uuid": "f8c45c7d-4b05-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.172.135:54348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262447, "uuid": "fa620dbe-4b05-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitfoxcore.radio-technic.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262500, "uuid": "1a48def1-4b06-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitfoxs.comforter-panel.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262799, "uuid": "cc0e24aa-4b06-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfixpack.nomination5yak.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778262805, "uuid": "d01e97b7-4b06-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfixs.overdoitework.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263031, "uuid": "56934f6a-4b07-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipnodes.overdoitework.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263037, "uuid": "5a5ab352-4b07-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.203.119:35274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263104, "uuid": "81e2d8b0-4b07-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.67:56911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263104, "uuid": "825edb5e-4b07-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.67.189:33589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263342, "uuid": "0fc8b7ec-4b08-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://getcfgs.overdoitework.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263342, "uuid": "1028f3cf-4b08-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://getcfghubs.nomination5yak.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263636, "uuid": "bf353e8e-4b08-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sslkeys.overdoitework.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263767, "uuid": "0d493aeb-4b09-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.182.235:45690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778263937, "uuid": "72dbe4c5-4b09-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshbins.overdoitework.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264066, "uuid": "bfa8c7a2-4b09-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.67:56911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264172, "uuid": "feb376f5-4b09-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpdirs.overdoitework.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264603, "uuid": "ff8f4a25-4b0a-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.203.119:35274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264718, "uuid": "440500ce-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://skyvpns.tribun-triptych.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264903, "uuid": "b253dbd1-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.10.210/gaynig", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264903, "uuid": "b28bdc39-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/microc2.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264903, "uuid": "b29bc565-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.10.210/gay", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264904, "uuid": "b316ec03-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/wwg", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264904, "uuid": "b331b73c-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/ccl", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264951, "uuid": "cf1f377c-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264951, "uuid": "cf1f6add-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264951, "uuid": "cf208c6c-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264951, "uuid": "cf3b167a-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d142c0e2-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d14b65d8-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/bbcl", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d14c5c5f-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d1517b5a-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d151861c-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d158038e-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d15811ce-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d15cd607-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d15d7781-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d1617b34-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d16502c1-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d1689334-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d1783d6a-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264955, "uuid": "d17917d1-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "d44c9e2e-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "d453b4fb-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/bwwg", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "d453c0b5-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264960, "uuid": "d4647516-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264961, "uuid": "d510cc01-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.245.90/bins/micro.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778264961, "uuid": "d5382f30-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.151.41/nexus.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265082, "uuid": "1d2456c1-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dbinsts.tribun-triptych.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265186, "uuid": "5b44e575-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/httpsblog.photobucket.comsecure-photo-sharing-keeping-your-photos-safe-and-secure.php", "Tag": [ { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265188, "uuid": "5c361d61-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/20/webuybetterplacesformebetter.hta", "Tag": [ { "name": "5e4b71c13e06f17b472c9a7b0b13fbf3", "colour": "#6ecba3", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265203, "uuid": "657b5c39-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.107.152:44279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265320, "uuid": "aac70683-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://apidocs.tribun-triptych.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265324, "uuid": "ad4d1986-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://apidocs.tribun-triptych.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265505, "uuid": "191b5cdc-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.232.246.84:44129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265680, "uuid": "816ad9ac-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://metalts.tribun-triptych.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265726, "uuid": "9d1d0a4b-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.23/httpsblog.photobucket.comsecure-photo-sharing-keeping-your-photos-safe-and-secure-metadata.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265728, "uuid": "9e6788ec-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.23/26/securethispersonnetworkwithmyfriend.hta?&%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C%D4%8C", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265732, "uuid": "a0b0a3b9-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.210.109:39156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265800, "uuid": "c90c8991-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.211.139:56601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265967, "uuid": "2ca821ee-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/httpswww.box.comindustriesmedia-and-entertainment.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265967, "uuid": "2cacc792-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/42/greatthingsforbetterwayformebest.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265967, "uuid": "2cb089fe-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/51/treeforbetterpicturetogiveubest.hta?&https://codecanyon.net/item/mirotalk-p2p-webrtc-realtime-video-conferences/38376661", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265967, "uuid": "2cb5e1bb-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/112/img_230705.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265967, "uuid": "2ccc8477-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/www.cdwg.comcontentcdwgenarticlessecurityprotecting-ot-and-critical-infrastructure-in-an-evolving-threat-landscape.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265967, "uuid": "2cdced97-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/155/greatideadsneverbeenchangefrom.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265968, "uuid": "2d78305a-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/dashboard/images/social-icons.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265968, "uuid": "2d785215-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/dashboard/stylesheets/all.css", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265970, "uuid": "2e23aaf6-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/11/verynicepersonforeverybodytogive.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265970, "uuid": "2e65510d-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/11/img_235009.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265975, "uuid": "3174352a-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://osbases.tribun-triptych.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265982, "uuid": "357abe54-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/156/img_182659.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265982, "uuid": "35867046-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/112/wecontrolaroundtheworldwithme.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265982, "uuid": "3593bb60-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.18/httpswww.cdwg.comcontentcdwgensolutionsdigital-enablemententerprise-application-integration.html.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778265986, "uuid": "37e879e1-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:46252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266085, "uuid": "7325b7e8-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.235.212/httpswww.hipaavault.comresourceshipaa-compliant-cloud-storage-secure-your-healthcare-datasbase.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266085, "uuid": "7327dcb6-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.235.212/www.cdwg.comcontentcdwgenarticlessecurityprotecting-ot-and-critical-infrastructure-in-an-evolving-threat-linkingclooud.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266100, "uuid": "7c141f67-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.80.211:58866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266212, "uuid": "becf34ed-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://gacorbos.me/vpyCvI?&https://www.getmailbird.com/setup/access-secureserver-net-via-imap-smtp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266212, "uuid": "bed7e4be-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://gacorbos.me/OA0F7y?&https://www.hipaavault.com/resources/hipaa-compliant-cloud-storage-secure-your-healthcare-datas", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266219, "uuid": "c293c1dd-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ziparks.malachtax2tion.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266236, "uuid": "cd059914-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://pokoli.byethost9.com/MSI_183508.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266338, "uuid": "09ba6d1b-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ziparkview.herdpu7pose.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266446, "uuid": "49d42cc8-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.199/httpsdeveloper.box.comguidesbox-aiai-tutorialsprerequisites.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266448, "uuid": "4b723cef-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.199/131/wellgoingonbestfeelingsforme.hta?&https://developer.box.com/guides/box-ai/ai-tutorials/default-agent-overrides", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266520, "uuid": "75f52cc3-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://rawdatamap.herdpu7pose.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266522, "uuid": "77243119-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://rawdats.malachtax2tion.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266694, "uuid": "dde23e91-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.232.246.84:44129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266761, "uuid": "05f4b724-4b10-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:46252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266829, "uuid": "2ea293ac-4b10-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.80:50933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778266881, "uuid": "4d73a95b-4b10-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.228.224:47962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778267127, "uuid": "e0127289-4b10-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.228.224:47962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778267172, "uuid": "faeef99c-4b10-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.145.98:50462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778267298, "uuid": "46043329-4b11-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.88.247:36751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778267718, "uuid": "40688f8f-4b12-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://uidmapbits.herdpu7pose.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778267895, "uuid": "a981e229-4b12-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.80.211:58866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268019, "uuid": "f3d9ab82-4b12-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srcgetproc.cabardian-year.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268252, "uuid": "7e65ecbe-4b13-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srcgets.centaur-victim.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268256, "uuid": "80e5c65d-4b13-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.78:38955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268375, "uuid": "c7d2423b-4b13-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://modbusdata.cabardian-year.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268439, "uuid": "ee3d4480-4b13-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.49.233:54679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268494, "uuid": "0ee132aa-4b14-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://modbuss.centaur-victim.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268676, "uuid": "7b3d5d05-4b14-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://pkgruns.centaur-victim.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268680, "uuid": "7db348cc-4b14-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.145.98:50462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268681, "uuid": "7e3003c3-4b14-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.54.249:41524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778268735, "uuid": "9e5b1057-4b14-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://pkgrunstat.cabardian-year.lat/s3yi7g-ma327-8b2fi-63zr3-x2775-6qb/updates.gstate", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778269091, "uuid": "72cf6c45-4b15-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://extnets.centaur-victim.lat/k5s8-byna-tqed-r6mwn-swmbz-jb2jq3v/access.fltr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778269700, "uuid": "dd60c3a4-4b16-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.78:38955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778269700, "uuid": "ddaef752-4b16-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.232.198:54145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778270300, "uuid": "433e9413-4b18-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.209.178.80:57219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778270358, "uuid": "65a233c2-4b18-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.54.249:41524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778270358, "uuid": "65c5f3c5-4b18-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.15.21:59847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271008, "uuid": "e96c1956-4b19-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.240:47170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271194, "uuid": "583732b5-4b1a-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.232.198:54145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0edd053a-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0edd07c9-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.armv6l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0edd1eb8-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0ee19985-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.sh4", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0ee264ab-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.armv4l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0ee39224-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0ee8c8bb-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0ee95d4d-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.armv7l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0eeb1248-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271501, "uuid": "0eebf81b-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271556, "uuid": "30189f11-4b1b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:53367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778271968, "uuid": "25a2dd9a-4b1c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.164:37147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778272221, "uuid": "bc3eff9f-4b1c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.217.96:35692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778272395, "uuid": "2401d84d-4b1d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.50:33514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778272518, "uuid": "6d64b4fe-4b1d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.8.104:59470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778272748, "uuid": "f651d7f8-4b1d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dqooybvg.overreactuntr2ve.digital/?ublib=EioNlkkgMahmubQX", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778272822, "uuid": "2260c451-4b1e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.92.25:38867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778273181, "uuid": "f8bedf5a-4b1e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:53367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778273722, "uuid": "3b344942-4b20-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.82.176:43179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778273784, "uuid": "6012201e-4b20-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.52.154:34637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778273898, "uuid": "a3e44ac4-4b20-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.50:33514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274018, "uuid": "eb2c5ad0-4b20-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.217.96:35692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274081, "uuid": "10fb639d-4b21-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.82.176:43179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274794, "uuid": "ba2ecdad-4b22-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://taskidview.fromj2nitor.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274801, "uuid": "bdca2705-4b22-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://taskidview.fromj2nitor.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274861, "uuid": "e208d49b-4b22-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.83.29:40230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274920, "uuid": "04ef53c7-4b23-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.247.149:57257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778274971, "uuid": "235dc51a-4b23-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ioflowpath.fromj2nitor.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778275277, "uuid": "d9b0a085-4b23-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://syncitnode.fromj2nitor.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778275465, "uuid": "49ddee45-4b24-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.52.154:34637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778275515, "uuid": "67a3df52-4b24-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.101.106:41876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778275629, "uuid": "ab6dc3f4-4b24-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.101.106:41876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778275635, "uuid": "af24d13b-4b24-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://doclabutil.guess-relevation.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778275932, "uuid": "5fffb80e-4b25-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://envsetproc.guess-relevation.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778276293, "uuid": "376e0c82-4b26-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitkitmaps.guess-relevation.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778276540, "uuid": "ca5db2c0-4b26-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.247.149:57257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778276592, "uuid": "e9522569-4b26-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:55434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778276651, "uuid": "0d0b9399-4b27-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://subclidata.guess-relevation.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778276713, "uuid": "31fda286-4b27-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:40016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778276953, "uuid": "c083d2d1-4b27-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://lanhoppath.guess-relevation.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778277313, "uuid": "9754f955-4b28-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxysserv.guess-relevation.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778277613, "uuid": "4a5e1253-4b29-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:55434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778277613, "uuid": "4a6428a2-4b29-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://optwebnode.krat5urface.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778277970, "uuid": "1eefc914-4b2a-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://usrgrpstat.krat5urface.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278156, "uuid": "8e044e60-4b2a-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvhubnode.7toravex.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278215, "uuid": "b122217a-4b2a-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vmlistview.krat5urface.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278390, "uuid": "195077bc-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://webcdnstat.7toravex.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278574, "uuid": "86e2d0cc-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshproserv.krat5urface.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278639, "uuid": "ad975417-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.83.29:40230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278693, "uuid": "cda640e5-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://netapiprot.7toravex.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778278946, "uuid": "649932e8-4b2c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcpconpath.krat5urface.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279115, "uuid": "c91f910d-4b2c-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvlogview.7toravex.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279236, "uuid": "11a441de-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://netmanproc.krat5urface.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279414, "uuid": "7be9e9e9-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://devbitscfg.7toravex.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279594, "uuid": "e6e1ea43-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://syskeypath.surgeon-snoot.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279600, "uuid": "ea3c024a-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:52506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279601, "uuid": "eb2effc5-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://syskeypath.surgeon-snoot.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279722, "uuid": "33068553-4b2e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://appboxdata.7toravex.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778279950, "uuid": "bae23e8e-4b2e-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://webdocserv.surgeon-snoot.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280070, "uuid": "027df600-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnswebsrvs.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280083, "uuid": "0a1bed1f-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://dnswebsrvs.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280251, "uuid": "6e804a25-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://appsrchcli.surgeon-snoot.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280318, "uuid": "96b130ca-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.185.130:40393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280380, "uuid": "bb411e70-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsrunproc.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280491, "uuid": "fd7b4ef7-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://logbinnode.surgeon-snoot.lat/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280497, "uuid": "00e28dc4-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.134.185:55935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280560, "uuid": "26af778c-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.185.130:40393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280732, "uuid": "8d3a8ef4-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpuprosmgr.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280737, "uuid": "9022f9c8-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvhubnode.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280797, "uuid": "b3ca64aa-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.134.185:55935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280799, "uuid": "b510777a-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.156.141:34856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f9168672-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f925b3a4-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f927c976-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f928c75b-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f929b8ed-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f938c484-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f938f985-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280913, "uuid": "f93b5340-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "f9805419-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "f99407a9-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "f9974dbd-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "f999cb77-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280914, "uuid": "f9a58e2d-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280916, "uuid": "fb0ed22e-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://webcdnstat.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280923, "uuid": "ff309e08-4b30-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://webcdnstat.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778280975, "uuid": "1e41c02c-4b31-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.173:8888/nerv.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281029, "uuid": "3e6821b4-4b31-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsmgrsvcs.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281035, "uuid": "41ffa549-4b31-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:56123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281271, "uuid": "ce77c5a0-4b31-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://netapiprot.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281400, "uuid": "1b6b67a4-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://topsvcutil.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281402, "uuid": "1c916c1e-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://topsvcutil.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281447, "uuid": "375869ca-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.201.120:58779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281521, "uuid": "63aad152-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:55593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281572, "uuid": "81d5c2de-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.100:42333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281634, "uuid": "a6b59408-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://srvlogview.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281689, "uuid": "c7b169b8-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitfoxcore.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281700, "uuid": "ce48e89b-4b32-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://bitfoxcore.mav2lorix.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281873, "uuid": "3579babc-4b33-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://devbitscfg.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778281941, "uuid": "5d974cd1-4b33-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:52506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282051, "uuid": "9f746354-4b33-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfixpack.qen9vorel.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282180, "uuid": "ec1e043b-4b33-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.254.254:44029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282232, "uuid": "0b6cc91e-4b34-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://appboxdata.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282243, "uuid": "119a93bc-4b34-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://appboxdata.5toralix.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282412, "uuid": "76b2f589-4b34-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipnodeclis.qen9vorel.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282470, "uuid": "99429eb7-4b34-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnswebsrvs.mav7voren.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282539, "uuid": "c280c379-4b34-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.254.254:44029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282601, "uuid": "e77e4320-4b34-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://getcfghubs.qen9vorel.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282831, "uuid": "709a527e-4b35-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpsrunproc.mav7voren.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778282892, "uuid": "94a2d63c-4b35-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sslkeybase.qen9vorel.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283131, "uuid": "22ed8095-4b36-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpuprosmgr.mav7voren.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283134, "uuid": "24fc7bab-4b36-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://sshbinpath.qen9vorel.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283194, "uuid": "48837e8b-4b36-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.232.77.89:51179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283376, "uuid": "b5749d79-4b36-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpdirsets.qen9vorel.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283377, "uuid": "b59d3ce8-4b36-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://opsmgrsvcs.mav7voren.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283672, "uuid": "65a21501-4b37-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://cmdsetproc.1zarelin.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283860, "uuid": "d5785a05-4b37-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitfoxcore.mav7voren.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778283911, "uuid": "f3c5317e-4b37-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://skyvpnnode.1zarelin.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778284156, "uuid": "8621e4b0-4b38-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfixpack.qen3larex.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778284219, "uuid": "ab986549-4b38-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://dbinstlist.1zarelin.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778284396, "uuid": "15230470-4b39-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipnodeclis.qen3larex.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778284519, "uuid": "5e43d007-4b39-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://apidocserv.1zarelin.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778284697, "uuid": "c898fbe6-4b39-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://getcfghubs.qen3larex.pics/c2cb43a1-3db9-486a-a707-ee88bcdb4813/google.ocx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1778284767, "uuid": "f22bd432-4b39-11f1-ab73-82aee05be84a", "comment": "Malware distribution site", "value": "https://metaltscfg.1zarelin.pics/73922b30-d888-4af7-9bb4-e76054f7aa33/check.so", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250007, "uuid": "03ab4e90-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.249.10.169", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206745, "uuid": "4995d10e-4a84-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.133.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266084, "uuid": "7293f1e9-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.235.212", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241425, "uuid": "084cd381-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.138.129.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217605, "uuid": "92bf1bbc-4a9d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.0.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778198406, "uuid": "df2f3870-4a70-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.72.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778252765, "uuid": "6fd57398-4aef-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.241.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778231945, "uuid": "f5d3e050-4abe-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.241.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223966, "uuid": "62073324-4aac-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.161.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283185, "uuid": "434d711a-4b36-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.232.77.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778275507, "uuid": "632a2f3c-4b24-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.101.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778272806, "uuid": "1931838c-4b1e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.92.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211907, "uuid": "4e498578-4a90-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.223.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239206, "uuid": "dda1184d-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.31.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265485, "uuid": "0d5cee5a-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.232.246.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778237406, "uuid": "ad2e49da-4acb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.36.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261227, "uuid": "2381acf2-4b03-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.172.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260986, "uuid": "937c6d48-4b02-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.223.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250245, "uuid": "91693aab-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.131.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778229125, "uuid": "64da7c0b-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.229.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236685, "uuid": "ff46e09e-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.247.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216585, "uuid": "32cbf6a8-4a9b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.180.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262185, "uuid": "5e234661-4b05-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.182.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239507, "uuid": "91005938-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.183.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266866, "uuid": "447dbd44-4b10-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.228.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778274907, "uuid": "fd2a5113-4b22-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.247.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211306, "uuid": "e81d3dc4-4a8e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.1.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778259007, "uuid": "f814ecfc-4afd-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.119.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211006, "uuid": "355eee54-4a8e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.51.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218626, "uuid": "f2e189a8-4a9f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.52.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241545, "uuid": "4fc47829-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.96.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778270344, "uuid": "5d83ba30-4b18-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.15.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236866, "uuid": "6b30194f-4aca-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.83.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778270283, "uuid": "396cd9f3-4b18-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.209.178.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778258584, "uuid": "fc2ad903-4afc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.25.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234345, "uuid": "8c691032-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.135.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778274845, "uuid": "d8276fc5-4b22-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.83.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243825, "uuid": "9ef47add-4ada-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.15.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778267165, "uuid": "f66c0b78-4b10-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.145.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263025, "uuid": "5319402e-4b07-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.203.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211246, "uuid": "c4477ccf-4a8e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.239.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280485, "uuid": "f9b549e3-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.134.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227805, "uuid": "52365d8e-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.36.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239507, "uuid": "91021921-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.128.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265726, "uuid": "9cc53951-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.210.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245086, "uuid": "8e4a4a25-4add-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.233.39.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220066, "uuid": "4d65fda4-4aa3-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.237.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280784, "uuid": "ac61962b-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.156.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251085, "uuid": "86374536-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.209.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244426, "uuid": "0520c46e-4adc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.228.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245446, "uuid": "6508ecdb-4ade-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.3.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778269684, "uuid": "d43eba1c-4b16-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.232.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778202125, "uuid": "87fdb5c0-4a79-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.11.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216165, "uuid": "388d3f5e-4a9a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.49.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205724, "uuid": "e931123a-4a81-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.71.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254746, "uuid": "0c1cae66-4af4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.112.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211306, "uuid": "e81f5a2c-4a8e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.153.67.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248325, "uuid": "191d993b-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.217.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778272506, "uuid": "661943e5-4b1d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.8.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778272206, "uuid": "b31ff9ad-4b1c-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.217.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242808, "uuid": "4075328b-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.31.142.221", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239025, "uuid": "71e3bf4d-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.174", "Tag": [ { "name": "176-65-139-174", "colour": "#54adaf", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282165, "uuid": "e3397d25-4b33-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.254.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204407, "uuid": "d82dfdaf-4a7e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.46.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268425, "uuid": "e5a1bb75-4b13-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.49.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778272384, "uuid": "1d4857dc-4b1d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.228.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218085, "uuid": "b09c7579-4a9e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.32.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215507, "uuid": "b043d422-4a98-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.211.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778198525, "uuid": "263bb0ef-4a71-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.108.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778230385, "uuid": "54409540-4abb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.111.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778208318, "uuid": "f3582ac1-4a87-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.123.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778231407, "uuid": "b558bcf1-4abd-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.204.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266445, "uuid": "497cbf7e-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.210.186.199", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250184, "uuid": "6d590f98-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.169.194.40", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243656, "uuid": "3a558d47-4ada-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "1vz4le.airport-clar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250186, "uuid": "6ea4df92-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ws11.rataj-vertky.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264886, "uuid": "a84ab0cb-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.60.245.90", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254326, "uuid": "1232ef5c-4af3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.15.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201946, "uuid": "1cea8361-4a79-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.243.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224745, "uuid": "3247ccea-4aae-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.140.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260566, "uuid": "9964568b-4b01-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.135.223.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778214665, "uuid": "b9f8e6b6-4a96-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.54.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260686, "uuid": "e093abb0-4b01-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.110.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221870, "uuid": "807bdbfd-4aa7-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.123.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234165, "uuid": "20e209f6-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.105.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263085, "uuid": "76d2b76e-4b07-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.67.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235727, "uuid": "c4059155-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "254.182.153.160.host.secureserver.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248985, "uuid": "a24f74f4-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "25smp.audiheadboa7d.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233626, "uuid": "dfb00b1f-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.64.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241187, "uuid": "7a4d0e12-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.125.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227264, "uuid": "100153f5-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.57.129.10", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234645, "uuid": "3f32615e-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.28.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215266, "uuid": "2060c31d-4a98-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.146.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778229607, "uuid": "842d46e7-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "3awswdxc.mav2lorix.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266807, "uuid": "2167fdbc-4b10-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.25.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215084, "uuid": "b40e8a51-4a97-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.255.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247126, "uuid": "4e9b799f-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.239.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212807, "uuid": "66b25044-4a92-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.2.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266084, "uuid": "7294043f-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.80.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264886, "uuid": "a84bc4eb-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.148.10.210", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248625, "uuid": "cbdeb028-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.157.233.103", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242807, "uuid": "407476bb-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.66.249.16", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235306, "uuid": "c939c253-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "4vxdasln.brand5calpel.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235306, "uuid": "c92ed1ae-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.188.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268246, "uuid": "7ad1a515-4b13-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236090, "uuid": "9c87062c-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "5bzb.tavro6xen.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239507, "uuid": "910eed26-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "5fp3.sorix1ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235606, "uuid": "7c1663d1-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ound-span.brand5calpel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778252828, "uuid": "9501ee51-4aef-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "5torm-sync.porukau8ar.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222226, "uuid": "54c3fc90-4aa8-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.161.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244426, "uuid": "0520da3f-4adc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.214.57.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778273706, "uuid": "311ccfc8-4b20-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.82.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778273766, "uuid": "54dd0066-4b20-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.168.52.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254746, "uuid": "0c1ca66f-4af4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.13.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268664, "uuid": "740808ff-4b14-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.54.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223485, "uuid": "439a9cdf-4aab-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.135.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249825, "uuid": "974904ca-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.109.55.181", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265186, "uuid": "5ad952b8-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.170.18", "Tag": [ { "name": "5e4b71c13e06f17b472c9a7b0b13fbf3", "colour": "#6ecba3", "exportable": true, "hide_tag": false }, { "name": "unknown", "colour": "#e83c34", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265726, "uuid": "9cc53228-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.170.23", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233207, "uuid": "e609a3b5-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "68uvag.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778258584, "uuid": "fc35db0f-4afc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "7mnkjpr.scient-telograyka.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242691, "uuid": "fb14e2b4-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "7onw.byerottin8.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264886, "uuid": "a84b4b1b-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.239.151.41", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254626, "uuid": "c494d83d-4af3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "859wyr.porukau8ar.lat" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1778229607, "uuid": "84261d75-4ab9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.40.31.143", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241852, "uuid": "06a40c9c-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "9jp4c.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244313, "uuid": "c1dadbc6-4adb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "9rehfapi.airport-clar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245692, "uuid": "f7e42a9a-4ade-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "aa63qt.assonanceka1e.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243655, "uuid": "39a9715c-4ada-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "abc.3bcs.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238664, "uuid": "9b08f509-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "aesgauji.sorix1ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778237827, "uuid": "a7bbba6b-4acc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "aligncolu.xamir4al.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246530, "uuid": "eb53638e-4ae0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-5cene.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240891, "uuid": "c9f0628e-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "am6xg75.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256308, "uuid": "af50646e-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "amrl.salvat5pozar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236453, "uuid": "74a20b88-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "andjemztech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234044, "uuid": "d8b8b75b-4ac3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "aobgz.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235009, "uuid": "17ffd60c-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "apiass.brand5calpel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778209386, "uuid": "6fe4508f-4a8a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "apidocs.2zorevin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199191, "uuid": "b3288192-4a72-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "apidocs.enricher-exclam.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220431, "uuid": "27313bdb-4aa4-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "apidocs.modeall.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265309, "uuid": "a41f20b4-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "apidocs.tribun-triptych.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778284513, "uuid": "5abc9eed-4b39-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "apidocserv.1zarelin.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221870, "uuid": "8085b5ca-4aa7-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "apiopss.1navorex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212566, "uuid": "d72da0f0-4a91-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "apiopss.scornful-up.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778225910, "uuid": "e89ad181-4ab0-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "apiopss.vbytetap.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282227, "uuid": "087eee75-4b34-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "appboxdata.5toralix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778279706, "uuid": "29d0bed8-4b2e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "appboxdata.7toravex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203925, "uuid": "b8eae6f2-4a7d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "appboxs.6toralix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215146, "uuid": "d8f909b3-4a97-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "appboxs.dimchown.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260807, "uuid": "28e4a60b-4b02-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "appboxs.dreamer5hrew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221213, "uuid": "f8eed8c6-4aa5-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "appsrch.1navorex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211845, "uuid": "298820f5-4a90-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "appsrch.scornful-up.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778225270, "uuid": "6b5f80e5-4aaf-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "appsrch.vbytetap.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280245, "uuid": "6af4ac58-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "appsrchcli.surgeon-snoot.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247667, "uuid": "9121284f-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ark-vena.colonist-proph.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227925, "uuid": "99d84b7c-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkfluxum.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247968, "uuid": "449e8bbb-4ae4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "arnnav.colonist-proph.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239810, "uuid": "459a4875-4ad1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "arraydar.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256665, "uuid": "83edd0c0-4af8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ascfholn.salvat5pozar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250967, "uuid": "3ff6949b-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "audi-vector.centrifuge-four.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778214606, "uuid": "9717b923-4a96-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "autboxs.pav3mirex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778225646, "uuid": "4b715981-4ab0-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "autboxs.ratmedia.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204885, "uuid": "f4e717ef-4a7f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "autboxs.residency5ilicat.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247426, "uuid": "01056808-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "balancebold.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244132, "uuid": "560e0e3f-4adb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bgkdrlm.sprutte5t.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257326, "uuid": "0de829e6-4afa-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "biomesha.salvat5pozar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778281685, "uuid": "c522f4a1-4b32-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitfoxcore.mav2lorix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283844, "uuid": "cc5c2d68-4b37-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitfoxcore.mav7voren.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262431, "uuid": "f142b075-4b05-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitfoxcore.radio-technic.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262492, "uuid": "155ab9c5-4b06-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitfoxs.comforter-panel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206027, "uuid": "9d7ea9ee-4a82-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitfoxs.mav1voren.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216885, "uuid": "e5289407-4a9b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitfoxs.mayservo.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778276286, "uuid": "330cd7e3-4b26-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitkitmaps.guess-relevation.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217185, "uuid": "97f68858-4a9c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitkits.mel6vator.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778207527, "uuid": "1bbce4d4-4a86-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitkits.peat-scoop.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778228285, "uuid": "7048e24a-4ab6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "bitkits.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248146, "uuid": "ae50c7d2-4ae4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "byi4cjm.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257026, "uuid": "5b8c4c5e-4af9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "c3353u83.peddler-wasting.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778258826, "uuid": "8c289dd8-4afd-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "c52ih.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240165, "uuid": "199c38a7-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "carrie-branch.7doreval.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241192, "uuid": "7d8f77f3-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "catal0-trail.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778237047, "uuid": "d6f9188d-4aca-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cgkeayqe.brand5calpel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240225, "uuid": "3d0632a2-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "circuit-scope.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240468, "uuid": "cdd756b5-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "clip3-stream.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283665, "uuid": "613cd341-4b37-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cmdsetproc.1zarelin.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778208376, "uuid": "15cf378f-4a88-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cmdsets.2zorevin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219291, "uuid": "7f785611-4aa1-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cmdsets.modeall.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215206, "uuid": "fcc2ca94-4a97-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "comwebs.pav3mirex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778226286, "uuid": "c89f728e-4ab1-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "comwebs.ratmedia.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205545, "uuid": "7e4f59a8-4a81-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "comwebs.residency5ilicat.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778237765, "uuid": "82b552fc-4acc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cove-sdk.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261584, "uuid": "f8696694-4b03-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpupros.comforter-panel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204885, "uuid": "f4ede499-4a7f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpupros.mav1voren.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215865, "uuid": "857e28f5-4a99-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpupros.mayservo.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280726, "uuid": "896e5628-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpuprosmgr.mav2lorix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283125, "uuid": "1fa6bc53-4b36-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpuprosmgr.mav7voren.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261645, "uuid": "1c905627-4b04-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpuprosmgr.radio-technic.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253365, "uuid": "d548e99e-4af0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "cqkjo.porukau8ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233446, "uuid": "74492923-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "crestdeliv.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778284212, "uuid": "a751ac94-4b38-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbinstlist.1zarelin.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778209026, "uuid": "98e828e7-4a89-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbinsts.2zorevin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778198891, "uuid": "0008cde7-4a72-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbinsts.enricher-exclam.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220066, "uuid": "4d6b80e8-4aa3-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbinsts.modeall.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265067, "uuid": "1407473b-4b0c-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbinsts.tribun-triptych.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239807, "uuid": "444666a7-4ad1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev-shel.sorix1ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203508, "uuid": "bff209b7-4a7c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "devbits.6toralix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778214606, "uuid": "970f6ad0-4a96-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "devbits.dimchown.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260386, "uuid": "2de2c6ec-4b01-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "devbits.dreamer5hrew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778281866, "uuid": "30dd6322-4b33-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "devbitscfg.5toralix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778279407, "uuid": "774aee6a-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "devbitscfg.7toravex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234645, "uuid": "3f41ea56-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dfsdf.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260986, "uuid": "9388e0ea-4b02-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnswebs.comforter-panel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204225, "uuid": "6bb4a2d1-4a7e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnswebs.mav1voren.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215385, "uuid": "6740868a-4a98-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnswebs.mayservo.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280065, "uuid": "ff885caf-4b2e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnswebsrvs.mav2lorix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282464, "uuid": "958066e7-4b34-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnswebsrvs.mav7voren.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260988, "uuid": "94c74d83-4b02-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnswebsrvs.radio-technic.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216525, "uuid": "0f23c4ee-4a9b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "doclabs.mel6vator.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206926, "uuid": "b5a80b9b-4a84-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "doclabs.peat-scoop.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227565, "uuid": "c3085034-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "doclabs.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778275625, "uuid": "a9642a53-4b24-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "doclabutil.guess-relevation.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204465, "uuid": "faa4ac42-4a7e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "domregs.comrade-dec1ine.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778225466, "uuid": "e00a72f2-4aaf-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "domregs.gzipsea.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778214307, "uuid": "e4e5fbb7-4a95-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "domregs.xamir5ol.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251865, "uuid": "57632e8c-4aed-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dptfcl.rataj-vertky.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778272745, "uuid": "f4c5c83e-4b1d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dqooybvg.overreactuntr2ve.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778252107, "uuid": "e73a534f-4aed-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-fluxix.porukau8ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254925, "uuid": "7744864c-4af4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynline1a.diesel-stark.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778255945, "uuid": "d6cca3dd-4af6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynmarka.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253005, "uuid": "fee2844c-4aef-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "efk47wb3.skewedencro2ch.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245151, "uuid": "b528ece0-4add-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "emuw.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778275926, "uuid": "5c9c5db3-4b25-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "envsetproc.guess-relevation.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216885, "uuid": "e52a5460-4a9b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "envsets.mel6vator.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778207226, "uuid": "68064dc9-4a85-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "envsets.peat-scoop.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227865, "uuid": "75c3deca-4ab5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "envsets.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778269084, "uuid": "6e6d4bc9-4b15-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "extnets.centaur-victim.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203807, "uuid": "72415ec3-4a7d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "extnets.comrade-dec1ine.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224571, "uuid": "caac647a-4aad-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "extnets.gzipsea.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778213586, "uuid": "37091437-4a94-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "extnets.xamir5ol.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248807, "uuid": "388b706f-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "extractrela.audiheadboa7d.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249527, "uuid": "e5835e1c-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "eyahy.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778258107, "uuid": "df809cbf-4afb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "factima.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240946, "uuid": "eac48b58-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "fallverify.pav9mirel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248566, "uuid": "a8dc1fff-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "fclmwfzz.colonist-proph.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254209, "uuid": "cc6e42e6-4af2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "finalcampaign.porukau8ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778230986, "uuid": "ba306003-4abc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "flame-reage.mav2lorix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242091, "uuid": "95402cda-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-bann.byerottin8.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242331, "uuid": "24a48f4a-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "fram-branch.byerottin8.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222768, "uuid": "97e73e99-4aa9-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ftpsrvs.addport.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201647, "uuid": "6b0ccbb5-4a78-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ftpsrvs.alien2tedchisel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211845, "uuid": "29862bca-4a90-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ftpsrvs.tavro9xel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266211, "uuid": "be21ac60-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "gacorbos.me" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239145, "uuid": "b9ba98b4-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "gene-pod.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778230324, "uuid": "2fea9690-4abb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "genomecatalog.mav2lorix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263331, "uuid": "09b0a76c-4b08-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "getcfghubs.nomination5yak.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778284690, "uuid": "c4a5842b-4b39-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "getcfghubs.qen3larex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282586, "uuid": "de384f31-4b34-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "getcfghubs.qen9vorel.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217906, "uuid": "461931d2-4a9e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "getcfgs.ipsetsew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263328, "uuid": "07c438c3-4b08-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "getcfgs.overdoitework.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206986, "uuid": "d8fe9a95-4a84-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "getcfgs.qen7larex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222226, "uuid": "54cc98f3-4aa8-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "gitlabh.1navorex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212926, "uuid": "adae4516-4a92-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "gitlabh.scornful-up.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778226286, "uuid": "cab23b02-4ab1-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "gitlabh.vbytetap.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254925, "uuid": "7748cb9b-4af4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-defe.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239085, "uuid": "95efe82a-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldefer.sorix1ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250846, "uuid": "f795c8be-4aea-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "grim-wave.rataj-vertky.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253365, "uuid": "d54bd8ce-4af0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "gwq4.skewedencro2ch.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254509, "uuid": "7f55c080-4af3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "harrain.diesel-stark.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778258351, "uuid": "7142566a-4afc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hf0gzeo.scient-telograyka.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256308, "uuid": "af4c2b72-4af7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hjdssxth.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262792, "uuid": "c81506c7-4b06-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfixpack.nomination5yak.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778284151, "uuid": "82fbfbd5-4b38-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfixpack.qen3larex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282045, "uuid": "9b9a01b5-4b33-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfixpack.qen9vorel.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217308, "uuid": "e1b26cbb-4a9c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfixs.ipsetsew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262794, "uuid": "c962fc5b-4b06-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfixs.overdoitework.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206385, "uuid": "72e43ecf-4a83-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfixs.qen7larex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253005, "uuid": "fee74243-4aef-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "howgsr7.porukau8ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235064, "uuid": "39335ba2-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hs01.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243171, "uuid": "1955c93c-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-n4rro.sprutte5t.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233207, "uuid": "e61114a8-4ac1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "id89652.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244491, "uuid": "2bdfc29c-4adc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "importdeep.sprutte5t.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247787, "uuid": "d8acbce9-4ae3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "insightmemo.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778231345, "uuid": "90489943-4abd-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "invoimeado.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778274966, "uuid": "203922c3-4b23-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ioflowpath.fromj2nitor.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215865, "uuid": "857fcbfd-4a99-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ioflows.pav3mirex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778226905, "uuid": "3a053e7d-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ioflows.ratmedia.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206145, "uuid": "e3db3037-4a82-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ioflows.residency5ilicat.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778284390, "uuid": "11c215cb-4b39-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipnodeclis.qen3larex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282406, "uuid": "7322842f-4b34-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipnodeclis.qen9vorel.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217605, "uuid": "92cdb722-4a9d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipnodes.ipsetsew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263025, "uuid": "532832f2-4b07-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipnodes.overdoitework.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206685, "uuid": "25f87bb1-4a84-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipnodes.qen7larex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250486, "uuid": "211f47c0-4aea-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "irfw.rataj-vertky.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248807, "uuid": "38893845-4ae6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "itage.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243466, "uuid": "c91e0e71-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "jm7xf.sprutte5t.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222113, "uuid": "11d27e8c-4aa8-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "jobadms.addport.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200985, "uuid": "e042b236-4a76-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "jobadms.alien2tedchisel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211126, "uuid": "7cf8df86-4a8e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "jobadms.tavro9xel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234110, "uuid": "003dfb6e-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "jobhunters.ly" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235668, "uuid": "a0ca768d-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "kdffa87z.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778252645, "uuid": "27cfa786-4aef-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "kekie27.skewedencro2ch.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778244013, "uuid": "0ef223a9-4adb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelmeshon.airport-clar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253966, "uuid": "3b39d8b7-4af2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelspire4en.skewedencro2ch.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200210, "uuid": "1270f5c7-4a75-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelven4en.baked5ham.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778255645, "uuid": "23ec3177-4af6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "komv9kg.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240345, "uuid": "84ab3a37-4ad2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "kptc.xamir4al.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200571, "uuid": "e9638b21-4a75-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "kznyspcb.arch-vivarium.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242394, "uuid": "4a0a4669-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lab-mark.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778276946, "uuid": "bc9ffad9-4b27-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lanhoppath.guess-relevation.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217848, "uuid": "2324d3ed-4a9e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "lanhops.mel6vator.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778208126, "uuid": "80e6c6d9-4a87-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "lanhops.peat-scoop.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778228945, "uuid": "f992354e-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lanhops.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257626, "uuid": "c0f07101-4afa-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "layersun.scient-telograyka.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778228945, "uuid": "f991864a-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "layoutamp.mav2lorix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778254145, "uuid": "a62ecf7d-4af2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lfvkqfz.diesel-stark.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243654, "uuid": "393bd656-4ada-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lianagomes.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222351, "uuid": "9f78d053-4aa8-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "libsyss.addport.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201290, "uuid": "9662c4dd-4a77-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "libsyss.alien2tedchisel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211485, "uuid": "52dddccc-4a8f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "libsyss.tavro9xel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243892, "uuid": "c6d5a4d4-4ada-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-array.sprutte5t.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778201345, "uuid": "b72937cf-4a77-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "loagolden.arch-vivarium.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241612, "uuid": "77d3280f-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lofr.pav9mirel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280485, "uuid": "f9c12bd3-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "logbinnode.surgeon-snoot.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221567, "uuid": "cc0761bb-4aa6-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "logbins.1navorex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212207, "uuid": "00e2cb76-4a91-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "logbins.scornful-up.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778225586, "uuid": "27cd3a50-4ab0-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "logbins.vbytetap.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233925, "uuid": "91fda8ca-4ac3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-fluxen.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227264, "uuid": "100b280a-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumlithen.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257806, "uuid": "2c7d4ca8-4afb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumnex0or.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236626, "uuid": "dbf6f8f8-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumspireen1.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245990, "uuid": "a989264a-4adf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "lz9di.assonanceka1e.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778209745, "uuid": "459154d9-4a8b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "metalts.2zorevin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199551, "uuid": "89c0e858-4a73-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "metalts.enricher-exclam.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220732, "uuid": "da2e2ca4-4aa4-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "metalts.modeall.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265670, "uuid": "7bc3a97d-4b0d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "metalts.tribun-triptych.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778284752, "uuid": "e91364ac-4b39-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "metaltscfg.1zarelin.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245513, "uuid": "8d1f6098-4ade-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "mistcin.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268367, "uuid": "c3291cfe-4b13-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "modbusdata.cabardian-year.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268485, "uuid": "096a2a18-4b14-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "modbuss.centaur-victim.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203211, "uuid": "0f055b8d-4a7c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "modbuss.comrade-dec1ine.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223725, "uuid": "d2a90175-4aab-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "modbuss.gzipsea.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212868, "uuid": "8ae190d4-4a92-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "modbuss.xamir5ol.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249825, "uuid": "9758e580-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "mount9-crest.rataj-vertky.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251984, "uuid": "9e10517f-4aed-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-carg0.skewedencro2ch.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778281266, "uuid": "cb74770a-4b31-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "netapiprot.5toralix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778278685, "uuid": "c92723df-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "netapiprot.7toravex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260447, "uuid": "5240cbc2-4b01-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "netapiprot.cereal5pesivet.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203088, "uuid": "c5e84eae-4a7b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "netapis.6toralix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778213886, "uuid": "e9c93d18-4a94-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "netapis.dimchown.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778259845, "uuid": "ebd5e937-4aff-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "netapis.dreamer5hrew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778279226, "uuid": "0b5bca61-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "netmanproc.krat5urface.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224211, "uuid": "f3fa7ad5-4aac-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "netmans.ipfspie.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220190, "uuid": "977e5d39-4aa3-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "netmans.lorex7in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778210795, "uuid": "b77a515a-4a8d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "netmans.parliament5almon.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236267, "uuid": "064b52c2-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "neuraldepot.brand5calpel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234108, "uuid": "ff5a38b4-4ac3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "nmturc.cyou" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257990, "uuid": "99c1dcb9-4afb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "norflux9ar.scient-telograyka.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778255285, "uuid": "4d9cdcc4-4af5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "oak-branch.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261886, "uuid": "ac462c63-4b04-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsmgrs.comforter-panel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205184, "uuid": "a729c19f-4a80-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsmgrs.mav1voren.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216286, "uuid": "803b95ac-4a9a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsmgrs.mayservo.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778281025, "uuid": "3bab74fc-4b31-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsmgrsvcs.mav2lorix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283365, "uuid": "aebdd353-4b36-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsmgrsvcs.mav7voren.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261888, "uuid": "ad94d752-4b04-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "opsmgrsvcs.radio-technic.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778277606, "uuid": "45f679c2-4b29-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "optwebnode.krat5urface.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222472, "uuid": "e767a024-4aa8-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "optwebs.ipfspie.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218507, "uuid": "ac4b0cd8-4a9f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "optwebs.lorex7in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778209087, "uuid": "bd808042-4a89-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "optwebs.parliament5almon.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778259248, "uuid": "87b24030-4afe-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "organiquot.scient-telograyka.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778210106, "uuid": "1d14ba68-4a8c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "osbases.2zorevin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200150, "uuid": "ee8302f7-4a74-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "osbases.enricher-exclam.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221092, "uuid": "b0ff2f0b-4aa5-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "osbases.modeall.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778265967, "uuid": "2c833ff4-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "osbases.tribun-triptych.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257446, "uuid": "55c0d275-4afa-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "outer8-signal.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778232485, "uuid": "37e6b584-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ozaltuntel.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778198831, "uuid": "dc3d1df8-4a71-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1l07-dock.baked5ham.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243292, "uuid": "60fee169-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "paste.sensio.no" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257085, "uuid": "7e72b4e0-4af9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "pasturepal.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268668, "uuid": "76a214d3-4b14-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "pkgruns.centaur-victim.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203446, "uuid": "9b1ca562-4a7c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pkgruns.comrade-dec1ine.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224028, "uuid": "86bf46e3-4aac-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pkgruns.gzipsea.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778213407, "uuid": "cc344b56-4a93-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pkgruns.xamir5ol.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268727, "uuid": "99f321d4-4b14-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "pkgrunstat.cabardian-year.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247369, "uuid": "df25f848-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "podcamoss.colonist-proph.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266211, "uuid": "be22e86e-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "pokoli.byethost9.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246947, "uuid": "e3c135b9-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "printposte.colonist-proph.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778228166, "uuid": "29924cee-4ab6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "private2-port.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238791, "uuid": "e66aa206-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-c4sua.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218266, "uuid": "1c9ddcb3-4a9f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxyss.mel6vator.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778208847, "uuid": "2e47062f-4a89-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxyss.peat-scoop.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778229307, "uuid": "d140eeb1-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxyss.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778277308, "uuid": "9463a35a-4b28-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxysserv.guess-relevation.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236565, "uuid": "b7c8a4c3-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-ff1914891a3e4ac9911682a004158d63.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204166, "uuid": "480aba76-4a7e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pwrlogs.comrade-dec1ine.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224869, "uuid": "7c33b84a-4aae-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pwrlogs.gzipsea.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778213826, "uuid": "c60eabbd-4a94-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "pwrlogs.xamir5ol.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241250, "uuid": "a04bb73c-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "quercanv.pav9mirel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243286, "uuid": "5db3addd-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "qulxjkdn.byerottin8.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250666, "uuid": "8c4761a7-4aea-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "quor-draet.centrifuge-four.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778232665, "uuid": "a2e765c0-4ac0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorvalea5.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238063, "uuid": "34a216ad-4acd-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0ad-hold.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266511, "uuid": "7106e588-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "rawdatamap.herdpu7pose.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221808, "uuid": "5bb796dd-4aa7-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "rawdats.addport.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200567, "uuid": "e7712fa3-4a75-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "rawdats.alien2tedchisel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266511, "uuid": "710431b1-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "rawdats.malachtax2tion.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778210839, "uuid": "d1d7e353-4a8d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "rawdats.tavro9xel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251628, "uuid": "c9c8f793-4aec-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "reef7-line.centrifuge-four.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778214906, "uuid": "4a1374c1-4a97-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "refid-xs.pav3mirex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778225844, "uuid": "c16842a9-4ab0-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "refid-xs.ratmedia.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205184, "uuid": "a72961c6-4a80-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "refid-xs.residency5ilicat.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778247191, "uuid": "755af732-4ae2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "reviewgard.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778258465, "uuid": "b4f7e8cd-4afc-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "rgdqy.lomov-stroganal.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242872, "uuid": "66c0b500-4ad8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "rmxuj8se.sprutte5t.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245151, "uuid": "b5277782-4add-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "rougcurio.airport-clar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778230625, "uuid": "e34cc9df-4abb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "routercircuit.mav2lorix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246350, "uuid": "802fe3ca-4ae0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "runw4y5-spark.assonanceka1e.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778240647, "uuid": "38bfdfc5-4ad3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "runwayclini.xamir4al.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778255945, "uuid": "d6cda310-4af6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sceneform.salvat5pozar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238007, "uuid": "131c8852-4acd-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "serforge8en.xamir4al.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778248506, "uuid": "8523d781-4ae5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sermarkal8.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778255585, "uuid": "006f5589-4af6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sh1e1d8-trail.diesel-stark.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238425, "uuid": "0c607c23-4ace-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sh4do-phase.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251146, "uuid": "aa637ded-4aeb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "shapegate.rataj-vertky.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250365, "uuid": "d8fa0080-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "shapegeyse.centrifuge-four.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241490, "uuid": "2f60fa94-4ad5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "silv3r-flow.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283905, "uuid": "f0b849e9-4b37-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "skyvpnnode.1zarelin.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778208676, "uuid": "c857d4a7-4a88-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "skyvpns.2zorevin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778198525, "uuid": "2645feec-4a71-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "skyvpns.enricher-exclam.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219769, "uuid": "9cbbd21f-4aa2-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "skyvpns.modeall.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264711, "uuid": "402c6b97-4b0b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "skyvpns.tribun-triptych.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249645, "uuid": "2c02cbda-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "slate1-pulse.audiheadboa7d.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249344, "uuid": "78cf4dc3-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-lithon.audiheadboa7d.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236626, "uuid": "dbf8e6dc-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sort4-mesh.brand5calpel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268011, "uuid": "ef02e6bf-4b12-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srcgetproc.cabardian-year.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778268246, "uuid": "7ae1934d-4b13-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srcgets.centaur-victim.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778202492, "uuid": "628bb206-4a7a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srcgets.comrade-dec1ine.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223431, "uuid": "230946a3-4aab-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srcgets.gzipsea.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212507, "uuid": "b3f96e1e-4a91-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srcgets.xamir5ol.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280728, "uuid": "8ab51c5e-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvhubnode.5toralix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778278144, "uuid": "86ed2f41-4b2a-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvhubnode.7toravex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778259906, "uuid": "0fc26c58-4b00-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvhubnode.cereal5pesivet.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778202125, "uuid": "8809f490-4a79-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvhubs.6toralix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778213226, "uuid": "6073f607-4a93-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvhubs.dimchown.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778259428, "uuid": "f30a1a08-4afe-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvhubs.dreamer5hrew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778203266, "uuid": "30103d40-4a7c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvlogs.6toralix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778214186, "uuid": "9c94b29c-4a95-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvlogs.dimchown.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260085, "uuid": "7a8b73b1-4b00-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvlogs.dreamer5hrew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778281628, "uuid": "a31c6940-4b32-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvlogview.5toralix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778279107, "uuid": "c46a2d67-4b2c-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvlogview.7toravex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260807, "uuid": "28e6293a-4b02-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "srvlogview.cereal5pesivet.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283127, "uuid": "20e6a321-4b36-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshbinpath.qen9vorel.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218626, "uuid": "f2eb1f93-4a9f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshbins.ipsetsew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263932, "uuid": "6f73c696-4b09-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshbins.overdoitework.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778207647, "uuid": "633affce-4a86-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshbins.qen7larex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223613, "uuid": "8fe42e0b-4aab-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshpros.ipfspie.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219532, "uuid": "0efb9fbf-4aa2-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshpros.lorex7in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778210109, "uuid": "1e5af22e-4a8c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshpros.parliament5almon.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778278566, "uuid": "82488a39-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sshproserv.krat5urface.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282885, "uuid": "90a3e855-4b35-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sslkeybase.qen9vorel.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218266, "uuid": "1ca1e32f-4a9f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sslkeys.ipsetsew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778263630, "uuid": "bbee0b65-4b08-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sslkeys.overdoitework.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778207407, "uuid": "d3e2f3f3-4a85-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "sslkeys.qen7larex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235306, "uuid": "c93f4a48-4ac6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "st0n-beam.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199493, "uuid": "67439137-4a73-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "stackcoupon.baked5ham.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778228525, "uuid": "ff56bd2a-4ab6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "stea-summ.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778253847, "uuid": "f46d80c9-4af1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-4sh.porukau8ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246652, "uuid": "343e5ba9-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-s3cur.assonanceka1e.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778276646, "uuid": "09aa51cb-4b27-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "subclidata.guess-relevation.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778217486, "uuid": "4bf11f9c-4a9d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "subclis.mel6vator.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778207853, "uuid": "dda7f6bd-4a86-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "subclis.peat-scoop.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778228645, "uuid": "46d84feb-4ab7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "subclis.sixbaud.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236385, "uuid": "4c9515a4-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "svcd.tavro6xen.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778275268, "uuid": "d46f3bda-4b23-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "syncitnode.fromj2nitor.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216166, "uuid": "3898c78b-4a9a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "syncits.pav3mirex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227208, "uuid": "ee49953c-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "syncits.ratmedia.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778206747, "uuid": "4adddb60-4a84-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "syncits.residency5ilicat.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778279586, "uuid": "e1e10046-4b2d-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "syskeypath.surgeon-snoot.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220608, "uuid": "90539e3b-4aa4-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "syskeys.1navorex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211126, "uuid": "7cf5309e-4a8e-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "syskeys.scornful-up.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224625, "uuid": "eb0de48b-4aad-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "syskeys.vbytetap.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227565, "uuid": "c30bbdec-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "t0n3-wave.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199906, "uuid": "5d73e3b6-4a74-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "talfluxal6.baked5ham.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215507, "uuid": "b04a79df-4a98-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "taskids.pav3mirex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778226817, "uuid": "05aa77d1-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "taskids.ratmedia.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205909, "uuid": "573cb50f-4a82-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "taskids.residency5ilicat.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778274785, "uuid": "b4b46b0a-4b22-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "taskidview.fromj2nitor.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242631, "uuid": "d7096ddb-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcng.buckish-nabere.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778278929, "uuid": "5aca6642-4b2c-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcpconpath.krat5urface.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223850, "uuid": "1d3281a2-4aac-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcpcons.ipfspie.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219891, "uuid": "e50b9090-4aa2-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcpcons.lorex7in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778210526, "uuid": "176654e9-4a8d-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcpcons.parliament5almon.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218928, "uuid": "a70f9a25-4aa0-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tmpdirs.ipsetsew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778264166, "uuid": "fb455316-4b09-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tmpdirs.overdoitework.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778208055, "uuid": "568220c0-4a87-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "tmpdirs.qen7larex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778283365, "uuid": "aeb4b29c-4b36-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tmpdirsets.qen9vorel.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262185, "uuid": "5e30a71e-4b05-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "topsvcs.comforter-panel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778205849, "uuid": "339ded96-4a82-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "topsvcs.mav1voren.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778216585, "uuid": "32d660f6-4a9b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "topsvcs.mayservo.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778281385, "uuid": "1243d0fc-4b32-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "topsvcutil.mav2lorix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778262185, "uuid": "5e306916-4b05-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "topsvcutil.radio-technic.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236386, "uuid": "4caabd4b-4ac9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tradedsglobal.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778237345, "uuid": "88847def-4acb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tridraar.xamir4al.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246771, "uuid": "7b19a413-4ae1-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "trilineon.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778257024, "uuid": "5a3b5e78-4af9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "triven1os.salvat5pozar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251807, "uuid": "34943add-4aed-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "tvqib.centrifuge-four.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778267712, "uuid": "3cbd0567-4b12-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "uidmapbits.herdpu7pose.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223072, "uuid": "4cf8446d-4aaa-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "uidmaps.addport.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778202125, "uuid": "88059706-4a79-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "uidmaps.alien2tedchisel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778212207, "uuid": "00e468e0-4a91-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "uidmaps.tavro9xel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235966, "uuid": "5285435e-4ac8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-d0ck.brand5calpel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778256665, "uuid": "83ed198c-4af8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "unx7.swimsuit-unable.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250007, "uuid": "03bf8e98-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "updatedserverrr.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249166, "uuid": "0e33c72c-4ae7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-rel.expo5ejouer.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778222830, "uuid": "bcd0449a-4aa9-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "usrgrps.ipfspie.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778218926, "uuid": "a5daca97-4aa0-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "usrgrps.lorex7in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778209566, "uuid": "db31ebae-4a8a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "usrgrps.parliament5almon.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778277965, "uuid": "1c0f834e-4b2a-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "usrgrpstat.krat5urface.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241372, "uuid": "e89929b5-4ad4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "uvxh0h1f.ethen0shypnotist.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245330, "uuid": "1fecebb0-4ade-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "v28e.assonanceka1e.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778241912, "uuid": "2afd3ddb-4ad6-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-nexa.pav9mirel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778236985, "uuid": "b1cac34c-4aca-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "velvetcalm.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778229909, "uuid": "38238066-4aba-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vinespr.mav2lorix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778223190, "uuid": "93b1d3a4-4aaa-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmlists.ipfspie.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778219232, "uuid": "5ca77406-4aa1-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmlists.lorex7in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778209745, "uuid": "4592f153-4a8b-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmlists.parliament5almon.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778278209, "uuid": "ad51f663-4b2a-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmlistview.krat5urface.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200925, "uuid": "bc987959-4a76-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "volt4-stack.arch-vivarium.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778198530, "uuid": "28fa7c31-4a71-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-markor.baked5ham.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778250007, "uuid": "03b54bdd-4ae9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vordrais9.audiheadboa7d.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778232307, "uuid": "cdc47e87-4abf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vortide7en.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778233626, "uuid": "dfb5ed3c-4ac2-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsk.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280364, "uuid": "b2261c80-4b2f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsrunproc.mav2lorix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778282827, "uuid": "6dbf9e24-4b35-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsrunproc.mav7voren.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261346, "uuid": "6a539daf-4b03-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsrunproc.radio-technic.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778261286, "uuid": "465fc0ef-4b03-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsruns.comforter-panel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778204528, "uuid": "20229b82-4a7f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsruns.mav1voren.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778215566, "uuid": "d327f811-4a98-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpsruns.mayservo.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778246111, "uuid": "f1a6a8a1-4adf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmdock.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778242451, "uuid": "6c0396e2-4ad7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "wayradigitalmusic.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778280905, "uuid": "f476b1df-4b30-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "webcdnstat.5toralix.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778278385, "uuid": "164d4051-4b2b-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "webcdnstat.7toravex.pics" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778260212, "uuid": "c6134a47-4b00-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "webcdnstat.cereal5pesivet.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778202370, "uuid": "1990597a-4a7a-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "webcdnx.6toralix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778213525, "uuid": "12e4b0a9-4a94-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "webcdnx.dimchown.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778259664, "uuid": "7ff7625b-4aff-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "webcdnx.dreamer5hrew.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778220914, "uuid": "46e8c888-4aa5-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdocs.1navorex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778211546, "uuid": "770cf805-4a8f-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdocs.scornful-up.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778224926, "uuid": "9e1d7366-4aae-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdocs.vbytetap.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778279945, "uuid": "b7f1ad13-4b2e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdocserv.surgeon-snoot.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778227324, "uuid": "33a0bd7b-4ab4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "whpayment.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234345, "uuid": "8c796da7-4ac4-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "windharbor.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778249886, "uuid": "bba18348-4ae8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "wmail.dsdmpu.gov.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778234767, "uuid": "87ae3680-4ac5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "wz08rx0.1zarelin.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778251506, "uuid": "816fe2c7-4aec-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "x9hs.rataj-vertky.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778229307, "uuid": "d1433f44-4ab8-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "xmz60xrj.mav2lorix.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778238845, "uuid": "069fb1ab-4acf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "xvinmbn2.sorix1ar.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778235672, "uuid": "a35e9632-4ac7-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "xxxzxxxzxxx.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778199191, "uuid": "b329296a-4a72-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ym04rg.baked5ham.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778232005, "uuid": "19d260fa-4abf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "yslgmz.qen8vorel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778239446, "uuid": "6c935c1f-4ad0-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "yv1v.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778237407, "uuid": "ad35e779-4acb-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "yz8pj.di7ectkoshevoy.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778243466, "uuid": "c9205efa-4ad9-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenspirea.byerottin8.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778245870, "uuid": "6207050e-4adf-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "zentideis4.priesthood-in.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778255228, "uuid": "2b616416-4af5-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "zhe9.diesel-stark.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778226965, "uuid": "5d55253c-4ab3-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "zijas.5toravex.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778221682, "uuid": "10e9dc14-4aa7-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ziparks.addport.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778200392, "uuid": "7eb41fdf-4a75-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ziparks.alien2tedchisel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266211, "uuid": "be20ec90-4b0e-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ziparks.malachtax2tion.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778210466, "uuid": "f39005cf-4a8c-11f1-934f-82aee05be84a", "comment": "Malware payload delivery host", "value": "ziparks.tavro9xel.lat" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1778266331, "uuid": "0592ff64-4b0f-11f1-ab73-82aee05be84a", "comment": "Malware payload delivery host", "value": "ziparkview.herdpu7pose.lat" } ] } }