{ "Event": { "published": true, "date": "2025-03-02", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-03-02", "timestamp": 1740960189, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "3747be27-027d-40c3-8dc7-723f7e331db0", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1740873964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873964, "uuid": "94d32dfd-f15e-4e72-856e-df06cc5304c0", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873964, "uuid": "3aba9211-98e3-47e6-8e4f-78e215868a2c", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873964, "uuid": "c6013efa-307e-4292-924e-6660f15e6390", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873964, "uuid": "d177be9a-9de8-4d4b-8bf4-aaa6d2500888", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740873964, "uuid": "c45a9b17-c9c4-4045-b5fe-4b0947d969fe", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740874144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874144, "uuid": "b14d96bb-eaef-4d82-a2e4-528c2e6505e0", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874144, "uuid": "f0e23f63-5cb7-4ed4-8043-fc1ef4ef6e0a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740874144, "uuid": "fe489499-5865-4465-acfe-3077562685d4", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740874144, "uuid": "98bd8219-62bc-46c8-a8bd-6d2d6ef44200", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740874144, "uuid": "a58786fb-e6d4-421a-a112-50afa68a1281", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1740878345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878345, "uuid": "d4cc30ea-7c2f-4680-862c-c1dbf0b49611", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878345, "uuid": "82b2fc44-7fdf-466a-aa7e-e99ac53179d9", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878345, "uuid": "6b43af33-5ff7-4906-acaf-6f0afe379383", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878345, "uuid": "365ec159-ff3e-462a-a797-3fec2c738979", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740878345, "uuid": "03676b03-7912-4646-910c-df747399bd9c", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740880984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880984, "uuid": "4f403ebb-ebc0-4fe0-a5b6-a2a1e7bc289d", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880984, "uuid": "393708ec-733d-4b81-b655-69cc01e9f37f", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880984, "uuid": "8fdd081a-5fe2-4a15-8db8-07564eb41261", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880984, "uuid": "f4c8614f-7fa8-4cea-9b91-3fd5a3b5ee8c", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740880984, "uuid": "dbc1badf-ca34-415d-9ddd-acd07d589093", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1740881164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740881164, "uuid": "e01b6e26-e4ee-4d22-816c-cf4f72b527c0", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740881164, "uuid": "e2bb0f4d-2184-48d0-ba7a-94cb80c044e8", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740881164, "uuid": "29fbb95f-1d13-47ff-9df7-62e2fcb1b220", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740881164, "uuid": "0c718066-d9ab-4328-b46d-2303940c7ef6", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740881164, "uuid": "92d47695-7e12-4720-81d9-29dc656dbbdf", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1140e47-f6e3-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740884858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884858, "uuid": "69bb2f36-aa9b-40e2-b2bf-6d6651a6fe8c", "comment": "Malware payload (Mirai)", "value": "4bcd3cc795ed55a6cce4e5a3201b51d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884858, "uuid": "e2e7697e-7f61-47e2-8e0a-4b39c2f56424", "comment": "Malware payload (Mirai)", "value": "b15c8d8509bdb156f4742e769d34e0b6ede8a55c4d7ab782f8dc1d08523a30a0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884858, "uuid": "9ab0e357-5424-4dc8-8b3d-e3ba020c158b", "value": "T1E3042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884858, "uuid": "3e916870-97fc-48cc-9977-1f5510998523", "value": "3072:OjeivZQ5INXmmme2aE2zuROqb/ANQL2Q38YhTfYo+M/RTYERqLn:GeivZPNX5D2aE2zuROOLL2Q38+x+M/RG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740884858, "uuid": "5137de73-564b-4ecc-b714-25ccb282fdb4", "value": 181482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884858, "uuid": "2ee9f654-9770-4d7b-9275-3b04a36a9205", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad25ad95-f713-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740884935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884935, "uuid": "964a8102-7892-4a3e-863a-e25cc6a20a57", "comment": "Malware payload (Mirai)", "value": "360f4bbbb284baa7c02ef1a842dab95f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884935, "uuid": "ba869658-c9c2-461c-b80b-775144ec967e", "comment": "Malware payload (Mirai)", "value": "772d0c777b305d54c710557ca73614103c03738568f3bb8c49efc3c1edfc7cf3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884935, "uuid": "e58ed7da-2b4e-4894-a41b-8f1e5ea0293a", "value": "T193B35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884935, "uuid": "39bc06be-40df-4f73-bd26-d213324addc5", "value": "1536:eTW/VCxsHZusP2Li62C8TOKDRpvfPV2AJo+WMDPW+zBG7c:eytCxsPx62NlDzV2p+W8PbMg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740884935, "uuid": "992d6828-14ec-4f67-b705-ad0bf41f0482", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884935, "uuid": "d6d9e111-0ac6-4e63-818c-19d83a2828fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15a370ac-f6e6-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885051, "uuid": "0b398985-99dd-4e4d-814f-8abf28dfaff4", "comment": "Malware payload (Mirai)", "value": "3c4d94249158fb5a8d979b5cdf589325", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885051, "uuid": "bda10dd9-e5e9-4877-a153-ac60c1754675", "comment": "Malware payload (Mirai)", "value": "a58a65b9fed2964e6901c8deee1b2909a4edf230c1ae1abdd4ca63dfcc7ea8c4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885051, "uuid": "0a31d55f-2c97-4d05-bc17-2789206318ae", "value": "T1E1C31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885051, "uuid": "6365c74e-238a-4deb-a0dd-650da34558eb", "value": "3072:pKaprMh7qOXWFh4UX0AFcO5ZupvWVXeg:pK7fXgh4UEAFcuZupeVXeg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885051, "uuid": "66f1665a-834b-499a-b129-1af4df8b90c3", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885051, "uuid": "b7440212-4137-4cba-a428-286761127456", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17187f24-f6e6-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885099, "uuid": "8ef98673-f58b-446a-b688-543d7efe6f47", "comment": "Malware payload (Mirai)", "value": "3fa04adb14da9bee014928c030741620", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885099, "uuid": "031a7391-7eed-4470-9e20-650abd390b67", "comment": "Malware payload (Mirai)", "value": "2c9e9630589c0186fed8c49755bd4038c7c3e9bf7f8ce0d22f54e4de23dd0b05", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885099, "uuid": "f90df6aa-bd79-47b9-b8bc-f3803e62145c", "value": "T126E32AC7F900DEFAF80AE33648530905B630BBE115925B372257797BED3A1991873E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885099, "uuid": "10d14a48-3ee1-4408-8d1a-0f8129259219", "value": "3072:AXgrplSFwpjgxyuCduQw92SVvjbiVLryQOyEwJgW:AnojgxyPd+92XLYyE+gW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885099, "uuid": "7e2b18e1-8f2e-4549-af0f-f5816ad289ce", "value": 150496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885099, "uuid": "a62e259f-6bae-4a55-84ae-6a74fbc481b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aa45f08-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740885145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885145, "uuid": "f35748d7-dd2d-482d-8260-202cfd45f55e", "comment": "Malware payload", "value": "d63aaee528544dcd9e4b968a3705b898", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885145, "uuid": "5f1c68d9-d02e-4b07-b08b-e9a4fe1d1162", "comment": "Malware payload", "value": "da813db3683aa7a9e8ccdb42926e978e67b4caa8c4916d09899c98be1a42f443", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885145, "uuid": "afc73886-0771-4932-9d19-0418d0ffef13", "value": "T1172633BDA87F2571C0EFF6B0D26E1BEE72690C4F103490D9BBA6B0A541DA34291377", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885145, "uuid": "da98d7a6-3433-4df0-8fc6-55e8d9a29e7a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885145, "uuid": "e1e89dea-0338-4886-b421-c3909652ec02", "value": "98304:J9hBbspjkJgdzRmE2YRjhCdZKscrAPI3s3I/EYOl:Z4FmE2fdZaAdOEYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885145, "uuid": "bf4ad392-33f0-407b-acc1-6eeec6a5da72", "value": 4735488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885145, "uuid": "641f8478-1047-4cf9-a9e6-1503ff370c37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "501577fc-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885208, "uuid": "df80992c-0da4-4d29-b971-6499ae2c79a2", "comment": "Malware payload (Mirai)", "value": "7b912068e35f6c25ce9a8b264dbeb4d4", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885208, "uuid": "f04e3699-b126-4a4c-ba52-cf3c95a57f20", "comment": "Malware payload (Mirai)", "value": "3d19066949ebfd287907986918e5eedbd812612939010006fc6d8b0f17b9c69e", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885208, "uuid": "e1950074-1492-4d5a-8442-156a6c4d9929", "value": "T12793F60ABF501FFBDC6BCE7746B90B0534CD955A12E52B363234D92CB56A10B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885208, "uuid": "3fe952d5-41b9-4d50-8b83-c4a8237b70b4", "value": "1536:SKm+07Vgvx1+k2SOXVjRGVHTSm0HS0gAHLo4WZpBcw9hWZ66js:LmVo1+k2SsVjAgmEo4Wvm66j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885208, "uuid": "e4b8f5c4-f56a-466c-844f-c5bdd0c0031b", "value": 89280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885208, "uuid": "611cbad9-3e48-46c5-aacc-04db1d3677e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ada81b6-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885226, "uuid": "12ee4d45-a0ef-427f-bcb3-6e176483d9c5", "comment": "Malware payload (Mirai)", "value": "632e2ec5c72ac074e8203daf2bf5b1da", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885226, "uuid": "f787fc7c-8420-436b-8a08-41c32f8729ea", "comment": "Malware payload (Mirai)", "value": "4852934e3236386fdfd9c06d744a470061d32c03fe747cb25af20473b6b971d3", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885226, "uuid": "060ae265-4944-4e5f-a61c-64b1ba1f4172", "value": "T1F7731A5AB9819B11D5C1027AFE1E528E33132BBCF3DE72129D246F217BCB55B0E7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885226, "uuid": "6faa261c-87b1-478d-987d-d067ec20388e", "value": "1536:kEn8lzITt7gWhWEBwIWC36SyyuYcHe5Z76ahv4fw/oJMxiWKJMlRr:QlUTt7WIryhez76ah2zJMlRr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885226, "uuid": "127c98cf-c26e-4349-ab6d-149d20768356", "value": 79244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885226, "uuid": "83083716-cde1-421e-82a0-897b613244ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e8b26a3-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885340, "uuid": "1b13801a-6cbd-4f09-bc5e-51f36bc289a3", "comment": "Malware payload (Mirai)", "value": "ea12cf515ddd6043223d676a33332ba1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885340, "uuid": "acbe36da-917f-45b9-a3d1-69c22191a541", "comment": "Malware payload (Mirai)", "value": "7026d3c852659606a588c4b24fab7629ffa9be50cafa4006d1c2e99da7f166bf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885340, "uuid": "097d063c-1532-4190-8c3a-92c1997f662e", "value": "T142D05E4CB84208B7F4388CB9F6DB3859A64FA2592E0B55CA5A98411FF8F4CA4B0609", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885340, "uuid": "46b5ef28-4d80-41b8-8ca7-207c1725cdc5", "value": "6:/VJ+pUKUF2RVYs+4MOYtjwIc3h3FsDKVKAOXqIKa03IKq1IEE1IKBKW:/VJ+jRhMOYjWgAsONI08W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885340, "uuid": "221a511e-989b-45fa-84f5-025d42db5b79", "value": 258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885340, "uuid": "bdf2f790-4cad-47cc-a76c-7341f27a0eee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f45e7301-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885484, "uuid": "bced6b2b-0ec7-4da0-833d-3d0c23efc3ab", "comment": "Malware payload (Mirai)", "value": "81addf52a888e9cb3a1d3f5656d0cc9f", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885484, "uuid": "73d8a50a-4ecf-4571-93d1-02f3db8ceb8a", "comment": "Malware payload (Mirai)", "value": "75c879ce2d22e33e310ed366a91624a9b6be6b4a879b3d60f8065f1640dfd80a", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885484, "uuid": "06601e53-a879-4eec-a190-9b8bf39f2925", "value": "T1AC533C81B31C0843D1736EF0363B27E1D3EFE99222E4E645250FA78991B2D369646E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885484, "uuid": "1e0b2e2d-75a9-47cb-a98c-cca63c0db366", "value": "768:XUO8mXSDNPfappuQiXz59vnfKd7z5oP26PO9fdssqYNGTgn69y5BFeDt9JHerwIg:nt8f+iXz7gJoP26P4f6sqVkncWiD/XyM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885484, "uuid": "8013b1a9-b45d-4550-8373-19c1e56f9760", "value": 62992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885484, "uuid": "dac5dd56-f9ff-4b65-b9ca-d3ac51e5e70d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb0258c4-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740885495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885495, "uuid": "302f5590-86ac-4b2d-afc9-9ef759918dc2", "comment": "Malware payload", "value": "c91f9f2208fb50a515b55d1c38d4bc43", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885495, "uuid": "6f46be85-3492-4792-9ad2-381d14cec3de", "comment": "Malware payload", "value": "9be6fa0603bb3c5b604ee769cb4665b4e8f5e39ef7a9096a2fff6815d3e1c4c5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885495, "uuid": "154da860-7e37-4eaf-8759-5a5ed00e2de1", "value": "T15B8533C82671EE3AC70C507717F749AF6A82B2697C8E8155690F23698428DCFF7716", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885495, "uuid": "c8a3efd2-a284-4ab2-ad0b-6ce8ae1e3198", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885495, "uuid": "fd8cb083-2f22-474a-b963-0d8ebe731b15", "value": "49152:+FBZHoDfx2LedhY4cO1qz6JZPiEyZZy/GHUPFLgEa3u8:oZI7xPP1qWqT8/Gmza3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885495, "uuid": "29cc6f06-d83c-491a-b7af-7f75f937d10c", "value": 1860608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885495, "uuid": "714c88b2-20d4-464e-8c8c-4840eed5472d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b097729-f715-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885763, "uuid": "d47e4fa9-a976-4ea8-95ec-f48bcdac3800", "comment": "Malware payload (Mirai)", "value": "51a3a33df4a91df1ef17e7fd138539c2", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885763, "uuid": "2a4ea13b-d7b4-474e-a10a-b5be3b73c780", "comment": "Malware payload (Mirai)", "value": "7a1e106c4ac39a252631878122e8922c604518cc6122248de98c2e9b5615cbe4", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885763, "uuid": "07523768-f305-41b5-b2d5-4cc63d748041", "value": "T19A437C23DC6A2E18E5598EB5B0308B3A5363D5A990572FEE516BC339A043EDCF5433", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885763, "uuid": "d0634e91-1875-428e-b787-141933a1dcf0", "value": "1536:2Fa//+hBIgItPiscqK7nwvcvADrC9JIGk:TmhBitPit7JADrVG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885763, "uuid": "a82369c8-f6c0-4878-ac4a-a5d8a52af8cd", "value": 55260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885763, "uuid": "3f82037a-e406-48d2-b9d0-64ca8a252257", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc817b0a-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885767, "uuid": "b1c60fd1-b3a1-476e-b839-bb6410e75ec1", "comment": "Malware payload (Mirai)", "value": "177184fb24eaf87df89b2b1569e2c6ee", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885767, "uuid": "e4c6d6ea-61d6-4aff-bcd3-02dfbdaf4aad", "comment": "Malware payload (Mirai)", "value": "cd25481d76ddc2197f9e7901472be46948bcf09312c85ec8e0d4a1dbb65b8688", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885767, "uuid": "4704fac8-6ca7-400b-bab0-5f2014beca3f", "value": "T1CC31445052D45DBCCCF452BFAD960711B3A49F80E0CB32A3911C6758BE2AE3C5C271", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885767, "uuid": "683c8bf4-2137-45d2-ad1a-99d3328228a3", "value": "24:vKGpa7Urz/jlfjOXK1G9Vev3gRGRP9iMfnBBuLeRoVlxrR+zz2KpQt:vKGpa7UrLZjNRlPJBu3lxrszLpQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885767, "uuid": "ec828e6b-58f4-4104-8afa-b5507ccddeb9", "value": 1460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885767, "uuid": "cddb71fa-395d-4738-8f42-1d9bbad6dd34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6002343-f715-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740885889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885889, "uuid": "8be7d3c2-c4ef-4b89-9f03-0e0bf14c333a", "comment": "Malware payload (Mirai)", "value": "3cc02bf671a45eaeba039322c23309dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885889, "uuid": "d5f3ca15-b7ec-42c4-a77c-df167eb3e7d5", "comment": "Malware payload (Mirai)", "value": "3ce3dbc6270727ad7071137379d87e04bdf219a815de9d959ef9bc68b2957b6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885889, "uuid": "ba5b9d0c-3a0e-42cb-bf6a-7bc695a42ee2", "value": "T109D3D70F6E618F6DF369873847B74A21A39833D626D1D689D2BCD6104F6038D641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885889, "uuid": "3c9060fa-0fe5-43f4-9717-89dbbb6ba4f4", "value": "3072:GU+h0iCh8FFEZCPg9fgikaMXQEBn8Gypx+AP4:Glh0iCh8FFEZCPgdgilQf8Ggg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740885889, "uuid": "f8645e85-527c-436c-aa1c-43ddf014ba1a", "value": 132432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885889, "uuid": "b333f4bc-f278-4cf4-bf34-2b3ad75bd5fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dfb11a7-f717-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740886466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886466, "uuid": "6b3709b7-9b6e-4ad7-9bf8-eeacb91943fc", "comment": "Malware payload (Gafgyt)", "value": "db1152c201525c47108acb4e8a348795", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886466, "uuid": "3e0aab3c-1c0d-4bdd-85e9-250ee4269835", "comment": "Malware payload (Gafgyt)", "value": "63b500780ad0d111180c9e0b5ec84d4284235749d78057175f83afc4e699ddef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886466, "uuid": "2ef330f6-897e-4ca1-bdd5-8d955abbe6b1", "value": "T1CB144B46DA518B13C1D22B7AF69F42453333AB74D3EB330699286FF43F8269A0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886466, "uuid": "974248ea-9a96-404b-8c04-c285f15aa955", "value": "3072:ZElU0jOOLiOCUuYTLaNSZ9cyTxZ+rLo4QnYM+CVWy3OM/9KotmDw5QMpPVz:Z5iOGiO5tnaNSZ9cyVZ+on3VWyeM/9bP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740886466, "uuid": "af5d42a3-4b47-48b3-9359-2e0aef7fdde4", "value": 191574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886466, "uuid": "96d5f577-d272-4d3a-ae6c-209e06666acc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b471adb1-f717-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740886665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886665, "uuid": "e263298f-3697-4387-ab71-739481e0f069", "comment": "Malware payload", "value": "ca2bb18fe40d6d686daad6a1a1fd6ec4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886665, "uuid": "f974ccb2-d7b2-4fe2-8094-e5c9ddc7202a", "comment": "Malware payload", "value": "f558b67a64bffbeaa2022590824cae37f74bfbe44327675153c80c7c472f8402", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886665, "uuid": "45816ac2-bbee-4cfa-99c9-765c9d90520d", "value": "T1BF06334FEC331A78C2489072EB8FCBE4A0617E2F60A9D3E9B7C874D854FA754118A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886665, "uuid": "5b2729dd-c4b5-4e0f-9436-b5fd24bd66da", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886665, "uuid": "5a27694e-9782-47f7-aed5-49a311f9dfcc", "value": "98304:6VJtUK81gCqh0eN4yyTnLJOpnavYibutGq:6j2K3Hh/q93YVaxbhq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740886665, "uuid": "86c50019-7da0-4c85-9560-d7c8fc843c95", "value": 3932672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886665, "uuid": "1ed876a6-9ad3-4522-9f72-9040c201a405", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5d79cc8-f717-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740886667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886667, "uuid": "b56224ca-281a-4802-adcd-3013ceace044", "comment": "Malware payload (Mirai)", "value": "3aff92ee9a87073c9e2baaa705ca4615", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886667, "uuid": "f159eb14-7fa1-4efa-8808-bbee7a89b0b2", "comment": "Malware payload (Mirai)", "value": "8c3a705934819af7f82e93550a89502e12185945e1cc1dac1eb4230c01a95ba6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886667, "uuid": "0a2306a4-a45f-4b12-8049-21b8056aec76", "value": "T1A613091D78031A2DD9C704B9606B8F5E9E5453C16193530BA7FAFE823E7326AFE01D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886667, "uuid": "ec43b16f-0bf5-4219-814c-5f0c16dcbc7a", "value": "768:5iaecQOHnVqMszNjjhLyucpme7LnlEHfoksnaaVMthQ2/cDgFHx4lIOGhc:5T1QOHnVqMszNjtyBhnJ1uFWlIHu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740886667, "uuid": "e95acefc-205c-4063-a807-aae0564d8c10", "value": 41444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886667, "uuid": "357b5726-6f05-49de-b2dc-47f610ae89a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc1baa7a-f717-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740886785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886785, "uuid": "79a39599-21d5-4d02-ad25-d4935acee70e", "comment": "Malware payload (Mirai)", "value": "132b61a9e468db824c4ce56b06048c4e", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886785, "uuid": "62d331ba-ae83-4fe1-b48e-62ebe500264e", "comment": "Malware payload (Mirai)", "value": "b05c179f2de94587825897a488435e73ccb35b635ba835e696186d0c64d6baac", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886785, "uuid": "0a2de0c5-873c-4c51-bab4-b49fa99c9c84", "value": "T11D633945BC42AA13C6C5177BFF5E438C372627D8E3DE7203DD269B21368B96B0D6A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886785, "uuid": "31134646-381c-4cd9-9443-acbb4832f71c", "value": "1536:5F3PL4A1Skj+7eYHvBEU4y9RUS0UdQHzm:5hPUABSeYPBES/UbYam", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740886785, "uuid": "4bb404be-152a-43c7-8f97-ec972f0ac118", "value": 67568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886785, "uuid": "c1726e3e-c9a3-4f89-97cc-56af8c0200c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be8f933f-f6dd-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740887644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887644, "uuid": "2c332775-af95-48b2-aa10-d04ab5808678", "comment": "Malware payload (Mirai)", "value": "4011da14cc6a4df1e105ca62b587e104", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887644, "uuid": "e3d0bfbd-4af9-4795-904e-bde31d582e79", "comment": "Malware payload (Mirai)", "value": "b34e0cc576f9b56c0f00d11ba7d7b0074bc04cefedb944305db880c089390493", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887644, "uuid": "0270094d-41b2-4f38-8d3c-f30eaae01607", "value": "T15EE30B46F8814B12D5D111BAFE1E128E37131BB8E2DF72029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887644, "uuid": "cc3c589b-d4f0-4c62-beff-f2debe5b5648", "value": "3072:THea4CbFUDAopAX0zTzzgaj/YKdW1EAo/LD:DePCbFQTAXeTz0acJEAo/LD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740887644, "uuid": "6a052a14-b117-4e4c-93ec-df5ea3afd9cc", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887644, "uuid": "757e3366-e81a-4199-9688-2d71733c85e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8c3ed31-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740887858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887858, "uuid": "f372620e-44cb-492f-be83-bcaf63d916e2", "comment": "Malware payload (Mirai)", "value": "9290f5cff9c94ce147b84d3092ad5ad2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887858, "uuid": "af916222-9cf5-4428-bb81-fbcf4e2202d5", "comment": "Malware payload (Mirai)", "value": "fc10d720fc9663bbc8f6a66ba5a1bcbf8454519ee57e16b774b9914e57db9977", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887858, "uuid": "326645d3-3263-4335-bc0f-962788b99804", "value": "T13F31D291B7D04DBCC8F411BEAE5B0311B3679F00E1CA7122D31CA358AD2AE3C6D364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887858, "uuid": "eacca35f-649a-4d29-9ad6-74c1590a7cb7", "value": "24:uTchKGpa7Urz/jlfjOXK1G9Vev3gRGRP9ilBBuLlZLRn69gW29:ughKGpa7UrLZjNRlPmBukJ29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740887858, "uuid": "59fd3451-e618-42cd-b275-8fca716a07cb", "value": 1504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887858, "uuid": "d14ae0ac-37f6-4d30-9b1d-868e21055de5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f213a02-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740887891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887891, "uuid": "335f7d64-f351-4185-9592-7b79a8efaffc", "comment": "Malware payload", "value": "c231ef9c9eb016b96e97732afabc9ba6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887891, "uuid": "493c3049-835b-48b6-8d00-7254d9b04c16", "comment": "Malware payload", "value": "4cae22f5d36915d1f7427a6cd5960bc3240976101862acd055aadd731f051c61", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887891, "uuid": "03904d1f-0a11-4332-b17f-473771389ae9", "value": "T1B4E53992AD4472CFC4CB27768127FE82581D86B9879549C3ACDDE27E7E63DC102BAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887891, "uuid": "03f37cfb-d9ab-4cf8-98e5-fd02d5a938cc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887891, "uuid": "87dc9182-4d81-41cb-aef3-eb3496e3f72c", "value": "98304:CBiJKgNu7hkNZFpYvu3XfJfAiqLVrAgM+1V:CUg+XRkrlM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740887891, "uuid": "4255ae02-5cec-4327-8480-b9bb9fa49598", "value": 3148800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887891, "uuid": "a3427e9d-582b-42e4-a891-4f370f631f63", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8f96941-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740887934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887934, "uuid": "68da2735-73b6-46c6-9d7b-5406a7b2ba14", "comment": "Malware payload (Mirai)", "value": "e5693f5b46b56302d666636125102c8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887934, "uuid": "3027de1e-806f-486f-a84e-63d249ad1bba", "comment": "Malware payload (Mirai)", "value": "a7eca8b8831aee68b0d5865d561b0db4d9d3719475894bc1b97d2e9e7b833517", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887934, "uuid": "6a833020-f7b0-44ca-8c2a-711132a07582", "value": "T129D31A46E7809B13C5D21B76FBDF42063323DB6493A723069528ABF83F877994E176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887934, "uuid": "4d1582fb-9e2c-407e-bcca-71ffc35faafe", "value": "3072:YszJ2OlaqIFOVBcKXLrJNfl3bFQ1hM/92TYyd:YslHlaqIFOVKK7vd3bFoM/92ki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740887934, "uuid": "05e1e38a-53a4-49a6-bd01-e3f201b2d09f", "value": 136810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887934, "uuid": "f69e4482-30d2-4265-880a-681eb8879054", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb0daf2a-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740887965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887965, "uuid": "f4541d29-e423-4000-876b-1d01bb573fd8", "comment": "Malware payload (Mirai)", "value": "82af84e4c273e41aea161be617f36e06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887965, "uuid": "338f7493-09da-4f89-a878-3c0013ff4e4f", "comment": "Malware payload (Mirai)", "value": "e38267ef5ef98622b9f0e7bf85aa0308b07049d9fb78a9541f17487fd5ab7e59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887965, "uuid": "38fb7c8f-f8c1-4540-87b6-5ab5af0ea7a9", "value": "T1F2131954F0D3E4F5C846057C349EEB722E23F1E2B13EDA9BE3E85563A881742A906E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887965, "uuid": "3aac9286-5b43-41ae-b019-5a7becd7dbb6", "value": "768:HWE7iIw9RoGMzTaTTSrtfil32NDV58xh4AbpOapBvGwAz9o1LBtMcEDGvos1lxJ:HiIw9RoGM3aTT8Ni52klBvGxaltMTGtn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740887965, "uuid": "dbcc2dee-dd41-43bc-8265-cafae9123cd4", "value": 43228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887965, "uuid": "a9b74e1e-28ee-44e7-9c0e-7f3e9addae92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc7a72aa-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740887985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887985, "uuid": "a9b7cf9a-1e1e-47a8-a2e8-f6a1323bbac8", "comment": "Malware payload (Mirai)", "value": "2287e0950695e1d63546aa66d38bb881", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887985, "uuid": "e2ba9fc0-b9d2-4280-9d2f-c67d1689d745", "comment": "Malware payload (Mirai)", "value": "eed1227f1a4bdc5f3ef630c9e881096975320e5fda5a3332afa9a30691711504", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887985, "uuid": "e90670eb-6e83-442c-92cb-2822e93172c6", "value": "T19641F0191F901F36EDA6CC36554A2B523ACC842FA16A23966234D964BD3F601E7D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887985, "uuid": "1b6a30e8-e829-4c50-946a-d0894f687823", "value": "48:UQ2oeruDS2J6df9ch+SMTLWPkeTnFCXp:UQjeruu9f9cMSoLW7Tk5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740887985, "uuid": "4ef2ee81-9616-4644-a894-82e71ea08ddd", "value": 2032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887985, "uuid": "32153a99-7ef7-4fec-ac82-2e0857a852bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4bcef75-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740888061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888061, "uuid": "b829f46e-073d-42d1-bcfd-f8481440b9d1", "comment": "Malware payload (Mirai)", "value": "146c909b4bc34ad9d17ccb0d75077470", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888061, "uuid": "b8c54edd-774e-48ae-b54b-7c2b1cb055c7", "comment": "Malware payload (Mirai)", "value": "5fddb776b19a7bd09bec20dac826204d2fab2549559ee062280a2f4bdd8f83f0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888061, "uuid": "0b2150eb-0dbf-4e58-af35-cd6705e1a323", "value": "T1E16191C510C646F2DF67581766B984A033D488B109C86E8ADEE6B9F4CEECD0924CD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888061, "uuid": "66182413-d3fa-4696-a303-328e453dfa46", "value": "24:v2spl2Ciox5FzasERusGjT6kGjUJioTLZRksbR0DmJHe:vHnLzbX3tioTL/JbR3J+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740888061, "uuid": "6e1f1350-8194-4d2a-b7b9-f08ccb9e6bcc", "value": 3281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888061, "uuid": "b4debb1e-4bc1-4053-a67e-a98977509ff5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c75eca53-f6f6-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740888305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888305, "uuid": "16d647f2-ee9a-4d47-8a78-deb957f8fdd2", "comment": "Malware payload (Mirai)", "value": "07b1b49205ed022b1c167b9a56f54fa8", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888305, "uuid": "f1892d6c-7f7c-4635-aaa5-c3ed53b3055e", "comment": "Malware payload (Mirai)", "value": "cfa48d7fdd539176406e8e7185d3fa69f7a8405a9b0bcd6d75c844e5322b129c", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888305, "uuid": "348c7c4e-c732-4e42-ae85-048308710ae0", "value": "T107833852BC419A17C6C5037BFF5E8388771663A8E3EE3203DD269F2137CB55B0A6A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888305, "uuid": "fde08432-187f-4315-9ba9-0c001dd11cfc", "value": "1536:PNPt7TctikZzaOO7Skvz9UymB23HMHiMhHCIViJ7:PNP1KikZz3O7Hz9EB28HiebS7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740888305, "uuid": "dca0e445-afd0-439d-93e9-060cb6957bc6", "value": 85436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888305, "uuid": "7bb40e62-3af1-4b5b-b5ee-d1cde0b3094d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65fc2cf1-f71c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740888681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888681, "uuid": "89adb1b0-b26a-4696-adf4-07e48d442b3b", "comment": "Malware payload (Mirai)", "value": "1526892bb1c1058e9b31fbaff4b82d55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888681, "uuid": "41cb826d-e044-412e-b207-1071a4223c46", "comment": "Malware payload (Mirai)", "value": "89f3a8bc638462c7a4a123c58d8a4d881d0e966101f4731270a6f7f442ef7158", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888681, "uuid": "9c334e48-0cfe-49f5-a5e6-b1cc06b36832", "value": "T11C33F8C5B841663AC2D1177BEAAF418E3754A7DCD2DB731788281BA07AC690F0D93F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888681, "uuid": "84eb818d-e3ec-436d-a520-d4b3173f26fa", "value": "1536:pZZoJ7DZ1IRZ9hIjNHYqSNaKKeZWOSwZXa:pZZIlKJQ1wfbZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740888681, "uuid": "14f43330-b6d4-45de-ba6b-698afca49f58", "value": 50400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888681, "uuid": "d6b05b00-fdb2-4d73-9292-6c24f90149ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c42a4ed8-f71e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740889698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889698, "uuid": "80fc4a4f-2868-4ce7-96d2-983c647363e2", "comment": "Malware payload (Mirai)", "value": "94d5dae84ba8819706e6e6d8e433d2e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889698, "uuid": "85b34c99-6ced-4f65-8706-bf888d1c4d10", "comment": "Malware payload (Mirai)", "value": "0fc9bb5ee90d27331b5984cc3cba809fa1737306621684c92de1fc7e3d8f6045", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889698, "uuid": "4b6e3688-090d-41b0-b153-9da59c2e6ff4", "value": "T10A33E8C5B842763AC2D1167BEAAF418E3754A7DCD2DB7313882817A07AC690F0D57F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889698, "uuid": "9140401d-e837-4d4b-a00c-ab42cebd2c21", "value": "1536:H1ZHJJUzS1G5k3OPzmss0cSNwImeZWb145r5Pa:H1ZMz31j7SXw0IRa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740889698, "uuid": "c9b31cc3-f75c-4287-88e2-06131c3fef89", "value": 50400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889698, "uuid": "4b5262bd-7a34-4ba4-a800-926772cf3770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfcac5f6-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740890147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890147, "uuid": "9da67069-792c-4f20-b8e7-7e403d657382", "comment": "Malware payload (Mirai)", "value": "f2d022832b38946e1b3362506e400d5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890147, "uuid": "0fc89cb4-9e5a-4e16-9fc4-be4b2e977336", "comment": "Malware payload (Mirai)", "value": "a5f9efd13a5a6765581a8d6c460bd6852427c572074a205454396a7c778ef7b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890147, "uuid": "3ede49f2-2fce-4ae9-a4b4-9ea7d500be68", "value": "T1714308C5B9819A39C6C2177BE9AF025E330497C9D1CA7353C4284BA47EC698F1E53F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890147, "uuid": "de3bdb55-6604-4a73-acc7-eb48ce03d3a6", "value": "1536:wcJ1oWIxMWmwsZl0uVaaoLjMzVLk1v+aEy4rOB:toWIxtmwhAa/AhLkZ+aEyOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740890147, "uuid": "374c4b9a-e333-4e51-9780-298a489cc801", "value": 56380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890147, "uuid": "45080adb-b030-4dbe-9534-79ebac099002", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9d0144b-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740890164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890164, "uuid": "8c0717bb-8ece-4a87-98a8-0ff9c0458586", "comment": "Malware payload", "value": "f9666ed69b29974d4e2d60a36b6167de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890164, "uuid": "1d193c12-45fd-48c5-a9cf-ce17e815d48d", "comment": "Malware payload", "value": "58b256e33f87f13e726775442b41e2007e69769ce868a6359cd7dbe855a319ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890164, "uuid": "aaa61b44-017c-4905-a7c4-ab80b1c8af9d", "value": "T138E55B6A751572EFD06E3274B41FCD42AB5D82F887150CC3D869707E2EA2CCA62F6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890164, "uuid": "2d086db8-53e4-4f6a-aef6-e0d61e59f854", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890164, "uuid": "a4f41267-86ef-4920-b92b-fea4b63ca098", "value": "49152:gv3vS5YPkhh4StPlYgYN5tzCu4Jac69yB:ym2StPlYhPtzCu26QB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740890164, "uuid": "0946bae2-92fd-40bf-9d10-8ee17332f8c2", "value": 3138560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890164, "uuid": "61fe3538-a174-4939-9a4e-42d0f0bd2d73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e12d01b3-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740890176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890176, "uuid": "7b1638d6-e179-4ab2-94cf-e5458c5078de", "comment": "Malware payload (Mirai)", "value": "2282688fb2d1b843708c0963b94ac8ab", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890176, "uuid": "bf8a4907-a79e-47aa-9736-adc6d4ea043b", "comment": "Malware payload (Mirai)", "value": "1f2104c71f9224fb0fe7a16fd4d23f1e4ac4a7c515f23d0313361844b58fd9e8", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890176, "uuid": "dfd57222-1680-4c3a-866d-5d4592e090a4", "value": "T1BA531895BC819A02C6D41277FF4E438D77266398E3DE3303ED269F21378E96B0E6A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890176, "uuid": "5fe33468-9331-4130-b7e2-6da703c0f5ef", "value": "768:PpqNoSPlkO0AlG72bHIc/KTd8N8LGQ4RD3cRtsinKptyUitikM9MwrdgmG262d13:RmP672bokxN8LGQzi5im9Bm2pdcm9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740890176, "uuid": "0d660849-dc0f-4d48-a42d-cecfec164d81", "value": 62892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890176, "uuid": "5a2d3198-73f2-4384-ba2b-5c97d0db58df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65442fd0-f720-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740890398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890398, "uuid": "8e604b7a-023e-41fc-9549-9a8e8102fc45", "comment": "Malware payload (Mirai)", "value": "9415537b36ee899ac0881768f1131afb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890398, "uuid": "59750d7b-f207-4ff7-965c-738e875b297a", "comment": "Malware payload (Mirai)", "value": "dd4bed241f3f63bb0637a524ea3ad4d9ea3937070b13155dc833395415a0153b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890398, "uuid": "9ddc1935-b731-49c7-b830-ec4e634685ff", "value": "T184231A0579781E26C0D5667A11FBCB52BAE637C863A4D14E7DB10E5BEE603002C26F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890398, "uuid": "3a5754cb-023b-4b6a-a6db-897e84988c68", "value": "768:PArho6OxeHNHnZ56BmDKJkR93p5TKpTgDmvAgL6Ws+yLYAJJdKqaerUyw0tM:P0hcQtHnXwmDKJe93AgyvDL6v+o+70tM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740890398, "uuid": "c3f95f88-ba17-4f21-93bc-763af592993a", "value": 47732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890398, "uuid": "fc4232db-70be-4d02-8bad-f7839e8c0a75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eec54fe4-f6dd-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740890763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890763, "uuid": "b8636193-da75-43e6-a08d-7217b88f18ff", "comment": "Malware payload (Mirai)", "value": "f649a4a5946c53d9012b144a984d3f08", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890763, "uuid": "21554c28-8ab3-4b80-9155-54ad8e7dd415", "comment": "Malware payload (Mirai)", "value": "27f706d14a8d323096add90d4fb3dae18b2d9f70206ad71e4c4aa07289b53643", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890763, "uuid": "fb12c3b1-b96b-4436-82ad-ae90b0b05c08", "value": "T1AFD30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890763, "uuid": "7b043ace-fc58-4e5e-bdf3-cb5e17d99fa2", "value": "1536:YKdzElm18uZJNb4ATFa8eAZHk4VB7fzTTDj97g4ivbGeqZvF20lqiwyw6RNPATqe:YKp50cU8e947Lzj97ziytxFhKdKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740890763, "uuid": "5fb6ce4f-bcab-435e-ac26-828dc92adf83", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890763, "uuid": "e386544d-9cb8-4562-8863-ea4668266251", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c749b71-f722-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740891108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891108, "uuid": "9f867470-9d09-40e7-87a9-84166d89ea90", "comment": "Malware payload", "value": "d7b83860cf02b829e84224f44c536e64", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891108, "uuid": "75710c6e-0377-4420-9710-367946eee776", "comment": "Malware payload", "value": "3d8ba7c82b3785fd5af3499a4795f3fa254312e905e0d8d2b5038cbc0b09a224", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891108, "uuid": "8f2a1319-c819-4cdf-8312-1bf91ab008dd", "value": "T19226338CB77B0770CE803274E39E65DA2799BF0F7B2494BD9B48E94288F1356161A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891108, "uuid": "06e835f1-59bf-4f5a-b844-522aa70e1bc9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891108, "uuid": "ea9bfb8d-c03d-4e14-a3ef-a49391e2e3a8", "value": "98304:zIGy6xY4MlSnKJm5B8attF1pYjSs2zPIRXjY/6UulgxQk/0:0oCW8aT3GjSsAPIhA6UuS2X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740891108, "uuid": "89f9c6c1-a770-4b3b-bca0-14cf6599a0e9", "value": 4768768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891108, "uuid": "85bf1757-ce93-4fbc-b16f-a7886a1be807", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24eeec0b-f6e6-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740891872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891872, "uuid": "0427bf2b-9b28-469d-b94f-50bb55d51d9d", "comment": "Malware payload (Mirai)", "value": "5d84a7f8aba9b1fcfb9606e92697e5c0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891872, "uuid": "4c350eda-a115-4644-9c9f-7fb5a43ca2a8", "comment": "Malware payload (Mirai)", "value": "e2cab3f404da217d9a0d4f2a42a5e08de20b25b868847bb258d53a51bb86a04a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891872, "uuid": "649d420c-3f4f-4dee-8fbf-5abe766b461b", "value": "T14CD32A06730C0A47D2632EB43A3F67E193AF9AC121E4F640355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891872, "uuid": "634c5714-af50-438e-80e1-e2e00dc0de2c", "value": "1536:9roGHNTUZNTl4IBUiCxfytetewkb1/a3wwo7lj0JvAhhHr5+5uQfqIbv7p0:nm5UiCxVtCiwh7lDhL2t0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740891872, "uuid": "da7c9766-1b97-4812-b912-e2729461e31b", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891872, "uuid": "b2b8244d-55ce-42f7-af19-17330eddae20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e5947bd-f724-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740892077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892077, "uuid": "04d38bfd-35d3-4b4e-a45f-db35f83a3125", "comment": "Malware payload (Mirai)", "value": "bc636a7384443d96d7d308345e5d3b00", "object_relation": "md5", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892077, "uuid": "3955c88c-cc82-4bc3-a3e5-d0e90c5b4275", "comment": "Malware payload (Mirai)", "value": "d1d4cbbd012a7f0e277c8f0b282deed56cb5dea53897f9c415c8f71862fcb38c", "object_relation": "sha256", "Tag": [ { "name": "404", "colour": "#8f2897", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740892077, "uuid": "0e5e4755-8897-4426-a871-566169e26197", "value": "T12793294AF9819F11D4D522BAFE4E528A33536BACE3EE7202DD245F2137CE55B0E764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740892077, "uuid": "057672b1-ac75-4b05-8e1a-03be280c2aeb", "value": "1536:1ynsVOEEt49MNE5JpsrIR6SyybYllRatK3zlSGtXeul944i+Quhj5RUcCiBhJ:7OEEt4ppRFElRatK3zlSsD44nhj5bCi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740892077, "uuid": "44536091-4f98-4c0e-97bb-b71d684fa748", "value": 92000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740892077, "uuid": "4ffabbac-73ca-4101-a51c-7255930289f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23bbebc5-f727-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740893294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893294, "uuid": "d4d9a62d-61c3-4503-aeb7-2912a43e9668", "comment": "Malware payload", "value": "0f2a6e8abaa990d1a48c08dca536f4ee", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893294, "uuid": "f2588d7c-d27a-4149-a226-cb4a0826e75d", "comment": "Malware payload", "value": "2efe3dacf7080e9e68de9575186505b286768e696ea57a43bddfd8451441bdba", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893294, "uuid": "ea29ebc0-9181-4671-b438-61d7cd4cdebc", "value": "T1C953F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893294, "uuid": "86f9fcd7-8799-4d80-a3db-f7802d03ac30", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dIoR1X1t1RB1p+dF2sAz:aA1fho1P6n2SoR1X1t1RB1p+dA1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740893294, "uuid": "ac4fdd65-eb51-4732-9bc1-382b48b5f4da", "value": 64433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893294, "uuid": "b375c21e-d7b9-41a1-83b2-2652da80c482", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b9e9167-f728-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740893791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893791, "uuid": "9071744b-b78b-4c24-a8f1-8d7e31db851b", "comment": "Malware payload (Mirai)", "value": "89434c1103a0a48caa2a8454ee63a156", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893791, "uuid": "b7e3fcff-ca31-4a8e-bc8c-b7e9f5d81fef", "comment": "Malware payload (Mirai)", "value": "47ae8d5661cb9e4b03914ff57e6defcb7d39e54c94fe2351dcb55e33c52cf42d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893791, "uuid": "45c71055-794a-4d0f-bb6a-acfb7f36efea", "value": "T15C237D35F1C4C9A8C0420970A8DB49364B16E5C457F13DB3DBE081A5586BBBEBA16F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893791, "uuid": "bcb11820-fa08-48e3-a222-945f5a110ea0", "value": "768:Uw+zIgmqPsHkQYyuemhy6SqmztfFUYnU0eMRSnB1CWwwj6:bjghtQ/uh1pmxf+uUHkSnrGa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740893791, "uuid": "936fc23d-2a81-4b8d-9ff5-482edb8a10ff", "value": 46420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893791, "uuid": "c7251f7f-0855-49bf-9f3f-bc0632435138", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75e15597-f728-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740893862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893862, "uuid": "bc026cf2-f21a-4033-9f22-12ef714d44b5", "comment": "Malware payload (Mirai)", "value": "02fda04142120388406b66a321492f86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893862, "uuid": "31157352-4b0c-460d-8282-be0cc6241de8", "comment": "Malware payload (Mirai)", "value": "f3b01c77c282d157136403ec36b2a0187cdf0309b84b8278a3baca2d33374448", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893862, "uuid": "1b2c2276-47dc-4009-873f-ec66c88ff99d", "value": "T127334B41F30D0A4BFA671DB0363B2BD1D39FE98031E4E6C4760EAA49D1B2A315256E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893862, "uuid": "c4ddbd2d-9824-4dae-a224-7f33232f108d", "value": "768:vUW1RMBmT7yLpcNe/mMREA+9TAm4Bf1iFbGtG8X6EFN/tc/C4k0IJ:vLMBe7SpoJMREDTAdZEFb58KU/6/vk0y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740893862, "uuid": "0c39456b-e7b7-441f-9c6b-fa3c9bf9be52", "value": 50752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893862, "uuid": "68f07044-f1dd-4bdc-9651-21de52813c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d88545cc-f728-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740894027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894027, "uuid": "fe93d6b8-4771-491a-be50-8f251fb7f253", "comment": "Malware payload (Mirai)", "value": "58fb956fd244a849f7aefc018b2cd124", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894027, "uuid": "c202530c-5f0d-4ff5-bdb0-fe28a45bf794", "comment": "Malware payload (Mirai)", "value": "ecf9dd01be088885acb098e7f3f94b79644b57073163fe851c2aac22937be855", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894027, "uuid": "b1e56192-f4f1-4382-bb7b-2b4706e21208", "value": "T16DD31A46E7809B13C5D21B76FBDF42063323DB6493A723069528ABF83F877994E176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894027, "uuid": "6e813d87-c0fd-4727-86a1-b06ebd78d134", "value": "3072:YEzJ2OlaqIFOVBcKXLrJNfl3bFQ1hM/92TYyd:YElHlaqIFOVKK7vd3bFoM/92ki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894027, "uuid": "6304cf2e-0f4f-4858-b9a7-ef0f6ca09e1a", "value": 136810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894027, "uuid": "0e0d556f-a9f4-41d5-977e-5c34a85a5329", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11a67680-f729-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740894123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894123, "uuid": "7d6a6977-8ea7-4f5a-ae81-df42060200cf", "comment": "Malware payload (Mirai)", "value": "47aabb705879cf7ee359dcd5e8cb4fa8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894123, "uuid": "dd058c78-7ae2-4493-aa4a-92de0464c871", "comment": "Malware payload (Mirai)", "value": "4582fa5e85b8c23bdd399f9b7b5162b469fbc21f73d61c689f528a5324ef1533", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894123, "uuid": "ffdb349e-da3e-4bfd-9c99-0a736d769ef5", "value": "T1B5335B03614250FDC8DAD6F8AB8F9925D97BF47823B7B14963C0BA2A7A5CF502F5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894123, "uuid": "31a2b696-f270-482b-a940-85b09ff82a33", "value": "768:ycDjS0WfH893g0KI3CigmmjujoplHLEbJa0jZuPQ/KJF7in13Nk6rKIh3fGXYYY:s0WUJzZ3Cqmjucpaa0j5/KJFeUmK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894123, "uuid": "9fa14801-cd50-4092-875e-0b5875bec0f9", "value": 50992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894123, "uuid": "e475bef7-23ca-42fc-a8de-2b18ff0fa825", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "843ce065-3d71-11ec-8eb9-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1740894485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894485, "uuid": "f1211f9e-6e6b-481c-ade5-d51b878c5890", "comment": "Malware payload", "value": "c40d82061f90158d2994f359c6786fcd", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894485, "uuid": "41427715-fbfc-4673-8c32-1889fe9170f5", "comment": "Malware payload", "value": "759b6899c2f91c870b4d78ef1edf96c85c68dcbd222d00292530894a2af2527a", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894485, "uuid": "dc4c9025-0338-4031-86e2-7b5b0791cb4f", "value": "T1ADD3124AEF36DC1FDF401EB21ADB5B8E9C6D795B41CBF0A4B9C1818F13A01C979122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894485, "uuid": "37f50068-b730-45f5-ab57-e3e224158c47", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio4:p3lOYoaja8xzx/0wsxzSi5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894485, "uuid": "a25634e7-71d2-4219-ac14-15f4c7730a51", "value": 135168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894485, "uuid": "518979e4-07d3-41c6-b588-1251c010f5fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb331bde-f729-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1740894488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894488, "uuid": "133fa1eb-d9b1-441d-9e4e-974d922daa78", "comment": "Malware payload (Healer)", "value": "fe6d254d8a8c469990431dfaa8bf57f9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894488, "uuid": "e9d5fb57-3bdd-46eb-b9c3-89a3ce6f2a3c", "comment": "Malware payload (Healer)", "value": "f65072c5737ff13a1dd1315f29e7aa816b6fcc679247595b2b9d1453d7c85a25", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894488, "uuid": "d84f4784-e654-424b-8bf8-10fd8e7d05f3", "value": "T17685332CC3F53936CE4F0E7D886667C3F1A5B44F14D8454DF922D6A6AE23F1628348", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894488, "uuid": "60d91f2b-e75b-418a-843b-8e4a2462cdb3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894488, "uuid": "c086ba52-9204-453c-9535-eeeaad934af4", "value": "49152:4btfHceJRZOI769qh7EcrhktZOYJykpZdZX:4btUovOMNEctcUYMEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894488, "uuid": "3a3a3b48-8437-429d-887c-fb083d4b8f5f", "value": 1737216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894488, "uuid": "7a88f3f3-06d5-431e-8820-6f8129d07888", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9708452d-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740894776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894776, "uuid": "af46b9cd-af5f-4f77-8343-b099d656c18d", "comment": "Malware payload (Mirai)", "value": "63028ec778d397ca2d2db37aa1aef843", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894776, "uuid": "58612e32-fb97-409e-b91c-e9da4ffbe6af", "comment": "Malware payload (Mirai)", "value": "fb5a30c4adbd802ee7a100993da660d3048ad96871a473cb14e8bebb43ee9bf2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894776, "uuid": "b65e013d-6dff-4058-b669-04bf4ba384d7", "value": "T11F630A96F9816B25C6C15577FE0F014E33038B6CE2DE73529D286B6477CB86B0E2A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894776, "uuid": "06dbe1e5-a3a5-425a-a539-338b764aeb1a", "value": "1536:SxncInfmJuwTIar1c2I2iLNk3amZxr05EYes:b8mJPTIaaN+amZxr0Ck", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894776, "uuid": "fa2d12f0-e9a5-43d3-821b-cc01ec92e54c", "value": 66860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894776, "uuid": "3c3950aa-bda5-4205-abfc-89483b3885aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d91ede89-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (MooBot)", "timestamp": 1740894824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894824, "uuid": "1e825f43-c90e-4838-80c8-d58d21c8af74", "comment": "Malware payload (MooBot)", "value": "a653143d9a77b2a485c655e4acbb9105", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894824, "uuid": "80f53602-2274-419f-bd87-368ac3190c3a", "comment": "Malware payload (MooBot)", "value": "20a363ff3659538c1fda666c7f5c4d4cfe45f1001af9f81b8ccf0d26cd5e6aed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894824, "uuid": "fde1f964-26a0-4398-a607-b068643e6dd7", "value": "T18A21EB66A3E65D27CD940777DDEF5B00E321BE44819EF403E32202191C3F31A0F221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894824, "uuid": "6128f9d7-1c76-4568-9d7e-a8019d92415f", "value": "24:JKR4llMRgP9qD0at6EoWGE8rUlFSs0VzLCkIdhUgHgQIU1RmNfW:JKqTFqDPturkFSsCzLwIUuNu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894824, "uuid": "28510a70-6098-461e-983d-78bb9a3d7a92", "value": 1168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894824, "uuid": "db32a8e8-430b-41ba-9980-0a63add69ff5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5b21238-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740894935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894935, "uuid": "3eb82e75-faf9-41b4-a4e7-db9fc8a22288", "comment": "Malware payload (Mirai)", "value": "b4c1feeb063cda6df5c421d80eeec602", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894935, "uuid": "1162d01f-53b5-4e51-8a73-844c38fdd92c", "comment": "Malware payload (Mirai)", "value": "350f2dc7c463d3fdb2161046afcef69763b97e9e850bd6220aa3301e0ff34232", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894935, "uuid": "81efe0a3-9426-4334-bda8-0ef0b5d5bd99", "value": "T1B3934A02B881D4FCC4ADC339576FA63AE531F05C0238B65B2BD8FB176A8DD209B1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894935, "uuid": "30d95202-6544-414e-a05d-d7e8c284cc02", "value": "1536:uTsHgRr2ju+tZGAwuEN7ufFAMw8vo0k7Def8185Y5sp3CozD:4sfu+tZGAwvNufFq8vo0ke0185YCCozD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740894935, "uuid": "62e6947d-9af3-44b2-82ad-0dfd8b11c53a", "value": 94344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894935, "uuid": "b8229ab9-d779-4faf-acf5-b505aa4419e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d75759b4-f72b-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740895314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895314, "uuid": "74cdf75e-591c-4108-af89-84198efe18d9", "comment": "Malware payload", "value": "bb4ab948d34e561dbd4d50dc654e2390", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895314, "uuid": "4d9a44dd-0ce4-41cd-a275-263ee9b61f46", "comment": "Malware payload", "value": "af9d8d48d0f358ac013c09acdc948e228fb8ac64c47ba0a88f6725c826dc547c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895314, "uuid": "ce6464c1-0349-4c2f-a821-78aed73c332e", "value": "T1260633EBAA73BA35D5881936E77C80F964E12C3F6838C75C9B81BE15729A3135307B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895314, "uuid": "3da393d0-c916-45b4-87c6-ef02aa46841b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895314, "uuid": "d1088301-58e5-40ef-8d5c-6951173ab8fd", "value": "98304:DoB8Db4NQy/SCeHeCH/5mJLt4ynCWfVWbXlrtUYFYffu:DN4NNS4L/nBEVRUqb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895314, "uuid": "25945202-9363-4065-bf7f-fcd95f5aa9cf", "value": 3926528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895314, "uuid": "fefc77db-0967-463b-ad13-7ce28e62d8f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a1ddf61-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895399, "uuid": "d75ce5a3-6603-4b50-82b9-d915dea406a0", "comment": "Malware payload (Mirai)", "value": "0b2ef87cb098079c44fff36a74ea91e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895399, "uuid": "98facaae-8a7c-420a-beba-f6d09498d2cf", "comment": "Malware payload (Mirai)", "value": "72c67fdf48af84ea1646f122368945a5f2dbaad954967c9cc51c3a6893e3324f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895399, "uuid": "bbd06800-caa1-493e-a4d4-ad77719bd914", "value": "T1B263B5453E218FFEF26CC2344BB74A21A75923D623F1D685D29CD9081E643CD986F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895399, "uuid": "2e80865f-c5c9-4a33-949f-514f8372b272", "value": "768:Tk4S/o9tRpzaHyAKhoLzA5PzgtBaNpy4/Qr3Ym5qIZS24TRHeR7oDhDA3cyxWhez:I47aSvh8E0q//PvrRHeGAyezbKci4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895399, "uuid": "3d89a644-3a86-4cdb-befe-1a34370bbe2a", "value": 68152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895399, "uuid": "c9f0505a-f371-4413-972b-6861ee9d989d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dfd3d0f-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895405, "uuid": "1809d22c-bade-421f-b4dd-ba56cf4c3059", "comment": "Malware payload (Mirai)", "value": "9d33a60e9572e528edf275100968a3e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895405, "uuid": "3717198c-15d9-47a9-935b-42c6c57ccbb6", "comment": "Malware payload (Mirai)", "value": "6d3f921e7b7bd0dfaf606dc0d2ec456a8a8e0060abe7e06e53636c106b77250b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895405, "uuid": "4ad65e03-47cf-44d6-b0a2-fab12652b3e5", "value": "T15F332BC5B941AA26C7C15677FF0F0289371A879CE1EA3343992D1FB077CB9570E2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895405, "uuid": "c0dc24fa-9df2-4103-9efc-0caaa932d8c5", "value": "768:XkfQpnr4BhXXYJlNDpHeGXfO+ybDgVNIhIxeC+rs+4cqbJ6lftm6bEUHKbf2bR9E:eyn0xIdoJj9fzXdyIsY2hskd+vDV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895405, "uuid": "7f388453-941d-4fe3-b5c4-97a9063e1151", "value": 55128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895405, "uuid": "2353708a-ae52-401b-b2e1-2598b04dfbb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b400409-f6de-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895460, "uuid": "fa83cc2a-6cc0-4dcc-8800-9066171f8112", "comment": "Malware payload (Mirai)", "value": "2fb3e3f56af89218988ca7ad78ad64f6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895460, "uuid": "423c9466-fae2-4aed-a16a-3577804b9496", "comment": "Malware payload (Mirai)", "value": "d8874bf7853421605f4c21568ef8aa8fd9154fd0bc47c62d1c422291d1845115", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895460, "uuid": "977c510a-036e-4699-9969-c6f4f35d76f2", "value": "T17004881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895460, "uuid": "58d86bd5-e9da-4de8-aa0e-62064fb1589a", "value": "3072:vg57xt7LHZwbq1ESBa3VCvrCsWrFesCVX:vglxt7LHZgh6C9FHCVX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895460, "uuid": "638d5460-450d-4cd7-9a77-ec2b161b745b", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895460, "uuid": "ef8001e4-821c-4af5-b198-76c34936753c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9479ecb7-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895631, "uuid": "d4904f80-bcf5-4326-bd6f-b38ac51d25f8", "comment": "Malware payload (Mirai)", "value": "9aa6b6a9afded34cc6a6fed0a56ccc10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895631, "uuid": "86dd37fa-35cf-4ff4-a494-8bf150628a66", "comment": "Malware payload (Mirai)", "value": "ff4e5f780e7e1975d4613e2ff85ba008ad979d8b5159c46ba16ffa2a0ae77af4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895631, "uuid": "b88853ce-78a2-4c98-9639-b6b0f9a8e8d5", "value": "T15A432A22ADE52D2BC1CC96BF21F34731F2B7534A24B84A2A3DA10E9D7F1464135537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895631, "uuid": "c33dc06e-d565-4dc2-91c0-ac9c47ced074", "value": "768:LSXhxWw1cjvqjyXTLGbVV/a0QWxrO+T5V3rL8IAXS1tnLIIX:LahxZGyj+LOyj8T5JtnLn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895631, "uuid": "1b341367-89ab-4012-ae01-18bbfed271e2", "value": 60360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895631, "uuid": "12f886a0-03e6-4d3f-8de5-15f94ab0dd28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f95d778d-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895800, "uuid": "cba4caab-a081-4214-af95-a201f20c31fc", "comment": "Malware payload (Mirai)", "value": "40a027ed5d5066bbe6443b3d9b13868d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895800, "uuid": "4a618e07-bf24-4b24-ba8c-c630e3ec11bb", "comment": "Malware payload (Mirai)", "value": "666069cc1a327a22099e04ebbf2c8cf06597bfb5ca648a43c1ec23899eb3c8dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895800, "uuid": "0003364c-7f06-4316-a6cf-ef796b337002", "value": "T19563D647AB904FFBC82FEE3305A9070535CCA54717A93B752674DC28B64EA4B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895800, "uuid": "e0b0a6ba-0ccc-4a79-9b6d-82cc551b7288", "value": "1536:NLz4U3ip8bkAnMG6yPpZHZCuIBi4lEdx:Nz4U3w8t6Aph/x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895800, "uuid": "c0f70c80-abef-44b8-8873-9ab0abd0ff21", "value": 68152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895800, "uuid": "ea091eca-7379-48b5-ad30-a8c723e0fe22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8bc5c19-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895838, "uuid": "8ac79ce0-d87a-4bac-a1a4-8097ce1d3b72", "comment": "Malware payload (Mirai)", "value": "9dec0c079dc61ce2055d11306b7d7ba6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895838, "uuid": "86d474a6-24aa-414a-ba34-5bac4fb4f8f1", "comment": "Malware payload (Mirai)", "value": "61364565fa429b877ef3d77f7eff9e4e567d6e97d521a0840e2e851409122071", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895838, "uuid": "b405bd5d-c2c5-428e-bcf0-d5c541cd6e60", "value": "T13521355AA4885D64DF29D73C4A7147537B05C928C10FE3CE4D1A46F6582B28C6A941", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895838, "uuid": "191b71da-1f98-4c2a-ad94-d4e41b2c5b61", "value": "24:w5olnAwdGtSnUpzzbBWpzms+1r5gDpum17zGokC7m17lRONfi:w5olnPdxnUpzzbBWpzms+UDpum17So7u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895838, "uuid": "84a635a4-c4da-4bdb-be20-4c289c21624c", "value": 1204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895838, "uuid": "ed334e8c-0641-43d9-93df-6dd2a1816013", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1207a00e-f72d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740895841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895841, "uuid": "40eb178e-6561-4fb5-9279-df3c515fb8d1", "comment": "Malware payload (Mirai)", "value": "7afa8372d833f1a8cea6a9af795dea0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895841, "uuid": "52406e1d-9d91-4062-91d2-02b67acbc762", "comment": "Malware payload (Mirai)", "value": "671d8bae34ee25865ec353e27b01042c292f8d9dc6e35efed5682de65a52683f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895841, "uuid": "56a1c63e-509d-4f92-becc-670b4a8b503b", "value": "T148136D13CD762E2CE61891B5B4354FB45BB3F940A28B1FA99061C32CD057EDDF1962", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895841, "uuid": "46f262f3-52ce-40c9-bbd8-4d9f09390049", "value": "768:nblXqxrpaI9oHkP5HH6vxMhsKVmtuaFoDSuQOCTiPqVfC5JT0oIb:xqppJ9oEP5HWZKVmtZKDEOCT85N0o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895841, "uuid": "8c11566c-1fba-4806-a485-e25d5721880c", "value": 44656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895841, "uuid": "47d5ad96-789a-439b-bc1e-94cde870f9f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eb93421-f72d-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740895943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895943, "uuid": "f9131b7b-0843-4dc0-9cdf-a142b16b2190", "comment": "Malware payload", "value": "95d87d04420f90558c56fc553bdb10e0", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895943, "uuid": "f0539f52-92b7-42e1-9649-518dd4708d70", "comment": "Malware payload", "value": "c2346767b4d46f2cea153d6d46f8110f8e4224b8e47782a5fb20a92a1dbb451e", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895943, "uuid": "6bf55d9f-e6ba-4391-b56c-6aa86c016ec4", "value": "T19D3484706951A4A3DEB29C7FF2E7F96C65B67512F9EB589C0440F2040DB9A00B05BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895943, "uuid": "bd0fc9fd-e3e4-498a-b261-a02184684aba", "value": "1536:yTAhNCljFelwwdUDiOhGbMmPxw7YXd3oMtnKNAru7UgsKvuCIKBF8RWfBkaAvyRf:yTAhNCljFeLj/VP0ouaRnxj/VPpo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740895943, "uuid": "9dd3e238-946c-433a-83c0-f61e66772924", "value": 236544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895943, "uuid": "04316bdd-ac92-4441-ad6e-347b1faf516a", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ca76713-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740896262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896262, "uuid": "1e001e0c-cf13-4072-85b7-016c0467841b", "comment": "Malware payload (Mirai)", "value": "ed91de521883cc2d3fcf43c5da751011", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896262, "uuid": "0b327e05-1fa3-459e-96ef-f2375a6bce6a", "comment": "Malware payload (Mirai)", "value": "6e4ba9fd22c58396d0520902c33e0158d4256c9a7593f8b8f92579727043d70e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896262, "uuid": "aa0b1eee-9e0e-439f-bd75-9ba65dcfd015", "value": "T1CD331AC5F981AA15CBC15537FF0F02893719878CE1EA3743A92D5FA477CB8660E2A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896262, "uuid": "af33783d-ac4a-4be6-ae36-44c4c0fa847f", "value": "768:ZIfQpnr4FhjSSJlNDpHeGXfO+ybDgVNIhIxeC+rs+4cqbJ6lftm6bEUHKbf2bROd:8ynodZdoJj9eTvmNoG3224/SLTV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740896262, "uuid": "acf94070-401d-470d-b305-8a6215d6a8f7", "value": 52000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896262, "uuid": "9b02546e-0e14-4ed7-89ce-2946f3a1ca63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1052438d-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740896268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896268, "uuid": "b7ff43f7-7904-42b0-888b-9fe3868efefa", "comment": "Malware payload (Mirai)", "value": "01ed9dba346d59ba0d83263d0c2d4c1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896268, "uuid": "c90b6353-c3d0-428e-8a4c-7e1cc09dff06", "comment": "Malware payload (Mirai)", "value": "f304227581e2f2adea68888401fa3247cc08c29078b24d253bcd993065e81ead", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896268, "uuid": "0402b282-72d5-48c9-9e7f-af4d95d0ee55", "value": "T1B353F80BBF211FF7E89BCC3709AD6B02189D544A65DDAB26BA34D444FA4B34E18E7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896268, "uuid": "1484d5e9-ba91-40cf-90ee-e7ae4fbaef79", "value": "768:lkcPrI+OvriPkT2MYwZyJsrwLX3MkR1J6PNfbqPYwQj:tPrI+OvriPksirwIA1kPA56", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740896268, "uuid": "67f44fc0-098d-4ab9-a235-579c335847be", "value": 60996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896268, "uuid": "f5e3706f-2b4e-49e5-8ec0-2585c94c7094", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2743695c-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740896307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896307, "uuid": "e9f70772-e948-41a9-b185-79fb8be4ca69", "comment": "Malware payload (Mirai)", "value": "3d4fb29fdc38677c1ae7645c3e941977", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896307, "uuid": "1e657b1f-25b2-4561-8e50-033a0cb3e207", "comment": "Malware payload (Mirai)", "value": "9d9ea9303d0fa1f89384e0370d8bfb2b3d3fef1e2e15f629b7e048a8db50fcc7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896307, "uuid": "a12e99ca-9fe1-4319-bba6-9fd1a67bd517", "value": "T10B23E6C5B8815A39C6C216BBF9AF418E375497D8D1CB7353C8280BA47ACA94B1D13F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896307, "uuid": "7b34b194-14b9-49b7-98c4-46040e67b389", "value": "768:tN5V+YP3atxMF/pimbws3Ufni2ccg5UhtarX5BonGjXXwCVy/zmJHUhG1jew/BU4:tN5V+WwxMe+wsxc0utaLFjMzVLG1vCa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740896307, "uuid": "66e9ab38-44c0-4e88-a92c-36d87af8a324", "value": 48120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896307, "uuid": "4248ed77-82eb-4c30-bac0-9bfd7de41161", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13b1be88-f6e5-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740897266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897266, "uuid": "e886f027-b12d-491d-86b4-896a821d5a9f", "comment": "Malware payload (Mirai)", "value": "02b22f8cd217a68b65b8a6eb258efa1c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897266, "uuid": "ca7d676f-26ea-40b3-8b1c-5c93809ea6bc", "comment": "Malware payload (Mirai)", "value": "2ad4f75702970639bc06861dd2a8147ddbcb7ddc69bc2e21d8774c91088da132", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897266, "uuid": "3510829e-6199-49aa-9c5e-e636d29a6221", "value": "T1710121CD315DD7E21E0E9E0DB4AAD4BD664882C07270AE99F9154870DCD820534DCF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897266, "uuid": "c2eb21b9-3ee1-45ee-84ba-f61cdca5a900", "value": "12:3J3KcjQK6qQKiNIl5zAQKP0LKjQKuOsQKiCQKc/QKVSEQKN+taKAQKN8jQKWiAQw:3J3rgdNI7zKUmz72tBiQHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740897266, "uuid": "89349269-611c-4674-81eb-327946c7e3bd", "value": 780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897266, "uuid": "86f13472-7883-4ad6-a2b6-870b0eb682ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fce45890-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740897274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897274, "uuid": "0369d684-ceb8-439a-b4fd-416aee458d5f", "comment": "Malware payload (Mirai)", "value": "cd6ac2671369b7e5df4c243b7b08a718", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897274, "uuid": "71e89b2b-2d6c-4148-a697-e9aed56633b6", "comment": "Malware payload (Mirai)", "value": "ec3032df28811262157592535696a0c51956e4953205fd19820cdf2cb97c9584", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897274, "uuid": "9a015f00-a3c8-4672-b871-50de67d58424", "value": "T14221F100F21D1423E5E13EB477372B6187A98F0327194408AAAFE6DDE8B9C30499D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897274, "uuid": "c8922ff0-62dd-4fd7-b75d-ef094eccfaef", "value": "24:3WUpWS9nSWZ6S4/KSwISBd6oTKP5tAFl482zktpKkvy5eYaaTo0YDRO6JJ:GVgZVbXGA8hz2pKkvy5tlBWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740897274, "uuid": "ba8bc455-0069-4dfe-986c-e10bbf3ebbed", "value": 1412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897274, "uuid": "3b96d40b-16a1-4018-8971-83b420f7f87a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6feac7f8-f730-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740897287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897287, "uuid": "40905a2a-8b85-4153-9bcc-60e3daa4f39a", "comment": "Malware payload", "value": "469864dcbab879c56114ded30b482dd2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897287, "uuid": "c2ec011d-d9aa-417f-98e9-f3fdc2adc224", "comment": "Malware payload", "value": "52d3ade4d1d2b5c81c686acd8e4c18425b08f4bccf76a6e42a1770ee8f36fb2d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897287, "uuid": "28f4c587-09bd-4142-bccc-1745f6d1f63d", "value": "T192E55B7A6405B1DFD44D36B6822BCD43EB4D02B9275868C3E8DA74FABD63CD112B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897287, "uuid": "62655422-f5a8-444f-80f5-7caceba66aa4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897287, "uuid": "75746a1b-594f-4f57-a2c6-305d5c03e92f", "value": "49152:eyuPmgOayXfE09o/QFogyriomxrpEG9XbMC3SnoOREncu5:UOay809o/2domxrpEkwC3Snotn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740897287, "uuid": "51c93fde-0224-474b-ae26-b1b616088189", "value": 3142656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897287, "uuid": "77d94ac3-2d4b-40a6-a1d7-c8de96ddf1fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfd6cb98-f730-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740897448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897448, "uuid": "1afcbf7a-7d7e-4cf6-919c-d17df9364507", "comment": "Malware payload", "value": "0332867d6b0010604865c770966564ba", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897448, "uuid": "5c763b56-004f-4d57-96cf-73fc5590e027", "comment": "Malware payload", "value": "0e9dd6fff555f302364afb445ba747695d929bfa4fb2ad591bdbc23fe35648db", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897448, "uuid": "91ea1687-cb92-4e5b-8239-f95ad75fb286", "value": "T1F555230AB74B57B3D4CA0975E9EE824641167D311A3006C7E543BFFE3A3A3937D922", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897448, "uuid": "ffaee3c9-d712-4a8c-8d65-cf931149cdf3", "value": "db0481ffa68897d90df5d9ef87692a4f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897448, "uuid": "9ce2beae-33db-4a57-96fb-98d9a67e1733", "value": "24576:ArEQj1CpOBd/FFeNqk88SAZ6ZcEscq6TorYk6x3TMmtySWkHKmQwwS:HQR5BRLeNq1AwZcEscq6T1kETDtdqlS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740897448, "uuid": "5aad1858-235f-4581-bece-40336abfc301", "value": 1335296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897448, "uuid": "62b78ec6-f20f-4be8-9672-ac3b6610b1ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4604e008-f732-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740898076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898076, "uuid": "f313eeec-bbce-4062-9ae5-0f5c70588865", "comment": "Malware payload (Mirai)", "value": "543a19979f7138a385096bbb5134000e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898076, "uuid": "f76e1826-940f-46a5-a3d3-7044ca2974d4", "comment": "Malware payload (Mirai)", "value": "5add225fd562c0bf41c32a932cfeb993e6e07faf2a133c96b2545b61d5f2da74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898076, "uuid": "69e69a20-1c14-476e-bf50-f44097295552", "value": "T11D43B51E6E549FBEFB99833D89B7CE015A2833D213A1C485E16CEE415D60389740FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898076, "uuid": "31e3b0ec-fb9d-4215-968b-b7c9e49367e0", "value": "768:XscYRFtZNsg43vprufWGMGyRGt0vq5/WBNuXFL8DF2FM8V8Ca8et8wVisLbI/93x:9QFR43vpifh0vxBg+Lk3Tvc6r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898076, "uuid": "733f6549-945e-42df-a8d7-5e3eb7ab2956", "value": 59220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898076, "uuid": "79144cc4-d3bf-45fa-8356-d6feddac4343", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c37ffcb-f732-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740898087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898087, "uuid": "44a3644a-f207-4238-8147-18e70b0e485d", "comment": "Malware payload (Mirai)", "value": "065d676bb07f3025377dc19dc6f1a59e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898087, "uuid": "8965c664-47cf-42ad-a61f-64e0c17716f7", "comment": "Malware payload (Mirai)", "value": "86cbe338b424d407124a393417ef09aba9a361e2a36b0d33566cfe7b5d9101b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898087, "uuid": "3a7f8041-2cb4-4cad-94fa-cfc1bf008625", "value": "T120131912B2284E1BFCC60671252F0FD40B7EE6C462E5B58BA95FD7610A32F671C58F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898087, "uuid": "8dbfb379-8f32-4075-8c43-1ca8ec983c33", "value": "768:/U3R5q9RFSqgQzaKXjXApphZthKNth5H5WvGZW25yHqQwwje:/UBymPvjtKt9WvGZhy0ae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898087, "uuid": "34d345b9-df71-4ffc-9618-4fc8507f774b", "value": 44292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898087, "uuid": "3a7b744e-761f-4e13-8f01-6fa0d0d09a09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7393cea4-f732-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740898153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898153, "uuid": "808ce465-cf3c-4111-ae04-96edc9b175b0", "comment": "Malware payload (Mirai)", "value": "e35aabcdf872c0b4c7b544ba68207038", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898153, "uuid": "b3d19a7e-4018-42eb-92b8-392a137a543a", "comment": "Malware payload (Mirai)", "value": "2caaf4c41bbe8f2d137c9c2744b9e255f055fbd6b6da0c20c3c03af7d40bddff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898153, "uuid": "f6bd2532-c8af-48b9-8313-ff8bfd91a152", "value": "T11C1309743C0AF2E8D4982734A4471FF22E9245583DEED6D3B0176135FAF6388B965E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898153, "uuid": "19e16b01-620d-4830-a01f-0182c048bde1", "value": "768:3v6GOCOIF0MX1tIWWpDYoz0KfUl/ZgYHJm1NnwRIDoEgRaQj+X5y1TRCeFt32C3r:3fTIWWXbcmvwb0g+X5y1TRnFR2bk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898153, "uuid": "1261b144-53a0-464c-b404-1e7f21394499", "value": 42408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898153, "uuid": "2aebd5b1-9fb1-44b1-be97-bbf2a53437b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc8ec7cf-f68e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (MooBot)", "timestamp": 1740898181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898181, "uuid": "174c9e5e-5eb9-493d-8d95-7279ebf04123", "comment": "Malware payload (MooBot)", "value": "6915656807c699a8db2140d358b974f5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898181, "uuid": "ebac0dc2-4274-4f5f-a40c-b7a2d448c46c", "comment": "Malware payload (MooBot)", "value": "2e989e54b78ed51ab7daf5b05c3468ddc6864328d1e98037fc78529fd0fcb0eb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898181, "uuid": "f2b19eb8-faf0-4d9f-a7d0-706f111de439", "value": "T16D21CB66A7D75D26CC640277DCEF3710E322AE44869EF863F36112550C7F31A5F220", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898181, "uuid": "5ffeb574-0ff7-4c3d-b451-2b53f6d2dae7", "value": "24:JhGgP9qD0at6EoWGE8rUlFSs0VzLCkIdhUx2wRGI1RdXNf6:JhPFqDPturkFSsCzL0IVNi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898181, "uuid": "14bf45a6-e092-4bc6-a495-ed7d0ac9e8fb", "value": 1172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898181, "uuid": "1b3b6015-e99d-410f-8e3f-5c8683494c75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57ed97eb-f733-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740898536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898536, "uuid": "f06a1f1a-c806-4f8c-b888-4d55750f9e07", "comment": "Malware payload (Mirai)", "value": "b716a5418c22c497d49ef2beefb66716", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898536, "uuid": "9f036cce-5170-421d-b038-2f7664cb60c8", "comment": "Malware payload (Mirai)", "value": "501ff7d4c4335c64689b35e13d7ba316237c8e1f3a64a8227973ac819e28bb4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898536, "uuid": "e9e0f182-29a1-4718-9a29-685720872a9a", "value": "T1A44308D7F800DD7AF80DE73B4853050A7230A7E502921B322757697BBDBA2E41567F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898536, "uuid": "1fac59c3-eee8-481b-9540-fdab211a5a11", "value": "1536:3EKri7oW9LPi7o8FbsGA9MlSD383HXZs7PN7:WvPi7yM0DMQl7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898536, "uuid": "20f6fe0c-0b61-4c0d-98c9-550946dcd887", "value": 57328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898536, "uuid": "8c3c857c-96e1-496c-8ebb-ae5e4c7667e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b8be7db-f733-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740898649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898649, "uuid": "f6a2e1c0-f672-482c-88cc-78d1a8a517fa", "comment": "Malware payload", "value": "8fd0a3b27b1d6e6c9cd12b30f6927c85", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898649, "uuid": "bd134ccb-fc12-45b0-90ec-8dcee10e78f0", "comment": "Malware payload", "value": "2dbee53254197ee152a22c36a892da2ac2106976487c82fe06bd33ca23e64f62", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898649, "uuid": "eab4cfeb-6400-4063-a055-de4e40f42a36", "value": "T13455230A92670363C20F5036D4BF992A655ABC305D512BC37907BFBD3B797E72E801", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898649, "uuid": "11ce30e8-ba92-49c5-9685-f4cbba10dbda", "value": "db0481ffa68897d90df5d9ef87692a4f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898649, "uuid": "fb208e81-d35c-44e1-8999-9613dcc009d4", "value": "24576:3WkldfcR4sWTeyxUcNxnVlmfd3q5vc4AW1TPTxZFmKkn2ReInfbXrj61ToFFt0ZJ:3WAfcR4sSeGjKa2fsTPT3FmKi2wqjXPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898649, "uuid": "0ee2012a-f9a4-40cf-9dd7-3952d6c27e23", "value": 1387520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898649, "uuid": "0bdf83e4-75cc-492a-89c6-13045e20c2a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccc815ed-f733-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740898732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898732, "uuid": "5430c566-0c30-4bc2-a514-6c31746063d0", "comment": "Malware payload", "value": "528ef22c4f878c2aaa099c44baa97295", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898732, "uuid": "ecea935a-08a1-4d61-9a99-4afaf671115f", "comment": "Malware payload", "value": "5f795c2d1a4ebe36ff4e5d2ad271a945a056ca87aa72a276525ca28abf8cf859", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898732, "uuid": "c3ebaa57-5985-42bf-b14f-4fc0846ed920", "value": "T16F34DFA87B7C5819B5383B10EC8F1353840DB9A2E06FF7153AD12A192DC77A667ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898732, "uuid": "e4bc35ef-a1a8-4fec-9743-d448431ce1a7", "value": "6144:idf+S96JNtWqeRnSv9RDJhA7zjXr3gdh5pFchcu9XS92:Qfr9aQng9RDJhAHjb3Yh5pm892", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740898732, "uuid": "d7a4359d-8802-4136-a42b-0411ce58b8b1", "value": 239706, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898732, "uuid": "9f3f6906-28f2-4ca0-ad18-a078bd145896", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04c500ee-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740900544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "4f21238a-5dba-4e23-8667-90c1cccfffd9", "comment": "Malware payload", "value": "6a21a627934fdf0e0c72e7b000ab9577", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "6dcbb006-bb60-41cf-ae7f-c4e83b98e4c6", "comment": "Malware payload", "value": "8ed449cbdd242293cad2502778b2337cee5d6950f83f498b528b5a7bbd15840c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "46772245-4cbb-4e22-bd51-338bfdc9793f", "value": "T160511B8D119065C48294C2C95ED771B2178DA06537BFD91834A6ADDB5309A680CBA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "f694ce3e-5a49-4355-ac8f-ded3e8e24310", "value": "48:YL6MEdURkzs/E6KreSgEsz3V7Kw/QT7BN4n50L8v5XpQO+OpbwVHi:FMgNJ6Iy4/Q5XD+OpYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740900544, "uuid": "48bf1eeb-4331-4f8c-988e-7a03bc695052", "value": 2689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "ff4b0632-c5c8-4ddd-b30e-ed9d40e06cd7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04d14b71-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1740900544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "ee4cd372-87e3-485e-810a-24dbe9e76bec", "comment": "Malware payload (Meterpreter)", "value": "7fca51d8fcd80ad7ee326f276d5a4ad3", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "c90a2044-d21d-43a6-8226-3714c2864b2b", "comment": "Malware payload (Meterpreter)", "value": "02263f1bd15e4364a463117bb79c7d7e7e8a75da47006b74ba4c976b34e15c5e", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "2f6c6d18-fa52-4c14-ae7d-8f18562d9e53", "value": "T1F973AE42D4C46475D0AA117D26763EB5A9B4F8FB3205C1CB7A8CCDE5EFC1CA0A6663", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "30519ea7-ddae-456d-b8f0-eeed5ff24bc9", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "683d30b8-d3d7-4ce0-a75b-638159038d6c", "value": "1536:Ii8/Ys532a9MsomXbBdYKEPJ6cExuMb+KR0Nc8QsJq39:UVWr+bBdYKCcxue0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740900544, "uuid": "b3477738-ff36-4339-9a8f-76164c77b22a", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900544, "uuid": "c2a0f8d3-69dd-49d4-9ad3-291dbced2cf5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0675c911-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740900547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "3cadc8e3-029c-487a-bb4b-6cddda6d690d", "comment": "Malware payload", "value": "4c68b5c1b06600c4462249ab207d6adf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "848aeb75-7003-45b0-a631-2dcf04d9fa88", "comment": "Malware payload", "value": "00c5f75afcf7a0bfdb955b5f3738d426cc76d2ff4350bf715a3912ab32966d47", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "d821d16f-ad93-45bb-8c59-a7eee2f826f0", "value": "T186357021BDF5F221E96049B02E656B7690796DFEEF7003EB5E823A1950305D21F30B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "fb3141fd-9e12-4812-9ecc-84ea4c9a1f6e", "value": "fcd12268a0804e74b39d3413a58a1e20", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "921baa03-90e1-455f-b559-f3a70cdde203", "value": "12288:+WzlCcQ2hyVBJf2aBBsc+/OlL4D5gA719BXLkCYBaOKET7:Bd6Gc+/+ctPBXLkx8U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740900547, "uuid": "50ed9998-bf7a-409b-b2d6-697ccbc9df99", "value": 1072512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "70306cba-e146-4fb2-aba4-ac56ee1b43e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069d0f30-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740900547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "73e1c754-fb85-4774-ac2a-4ddfa72df70c", "comment": "Malware payload", "value": "8308871617d6ba460dd19c42f1affb0c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "5929bfcc-2d24-4dfe-81da-0bec2c811994", "comment": "Malware payload", "value": "1d497f40e1b5f47597928759307de90415de1838771c56e8119c28f0b026c15d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "6be25c74-7957-44a1-ab88-e819708f178a", "value": "T104C53312B92FD669D5ECD536E94D8BCBBC8AD5BE1FD4D10F071FA124881202ACF860", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "2ce596bd-b7ec-4b0d-ac19-c98b989c8242", "value": "d3f821973ca8a4d3ad67eb5a1e94846e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "e4b68082-c931-4ebf-a54d-7dc913f5990a", "value": "49152:AQHJmFn2kNB9cK2cLXq2LzRz9fc/+xJHRoVxDIwlfA4e7qsPeprH:AljcZc7q2V9Y+xJsx7KsrH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740900547, "uuid": "cac6f976-669d-4cef-b918-24b596974fc8", "value": 2625383, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "93afbea9-40e1-4bb1-9b40-8cfac3f136e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06ccd7b8-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740900547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "c71b715f-9bb9-4727-9693-56931413a0bb", "comment": "Malware payload", "value": "d82762c0d326581ad95a7033a5f2f94b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "2566f8f4-9cf0-4ead-bc11-84cc7c9cfe1d", "comment": "Malware payload", "value": "4593be1b9cfdfbbdd15565d66f5bf4472996bf16c12639aa2af39d0a90ee2cc1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "85542db6-664a-48ab-8cd9-194d4a66f2fc", "value": "T12A248E21B6C2C073E5A304715AFC9A7A283CF9705B7918D7E3941B6A28707D26B34B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "6169cc49-bbe6-469b-8c82-8e75b4e69745", "value": "f3daa7a1549ac0fb5c5e328fe504c003", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "620145bd-58c2-4ead-a082-627eac533074", "value": "6144:YQUJEW+7nMlQ81ZWubsPvTq5p7JBQ4dB8TDlZn:YQXc1oubsP+hLbET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740900547, "uuid": "38f0cb2d-7483-4e49-8d85-2cc0d7d5b293", "value": 226024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900547, "uuid": "9e0b7249-f1a0-4767-b2ac-20d51a7499f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740903877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740903877, "uuid": "c28cdc09-14d1-40c0-8471-b0031ba6479a", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740903877, "uuid": "b920108d-c010-4d65-ac73-b0e42f5ea73d", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740903877, "uuid": "65ee114f-3b36-4b86-a99d-deb3508ec04e", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740903877, "uuid": "c0d36dc6-9f57-4e3f-b721-ce824a54ecd6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740903877, "uuid": "4ea51d64-1bd6-4304-acc6-d2ac6230b22d", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e406f4c-f741-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1740904667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904667, "uuid": "1769fdf0-c517-461b-95b2-849ad6568cf8", "comment": "Malware payload (Socks5Systemz)", "value": "4b31c31e4d10e6756a13cd408cff2c9c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904667, "uuid": "37f761f5-d806-445e-99e7-81ac45690c73", "comment": "Malware payload (Socks5Systemz)", "value": "18a22f568b1f93113e2b335923ea231ab52e5b39f8846ae6ced1e67c0b63f123", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904667, "uuid": "7001a27f-f342-47b4-858b-764248c70730", "value": "T18616331BBEC942F9D1165B722D588CC48473AF16F93E199672CCF62847677A8BC0E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904667, "uuid": "e9c1900b-e2a3-47f1-9cc9-8d8418e74355", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904667, "uuid": "fa0e51db-1dad-48cb-adba-09f92746986e", "value": "98304:3r0XCDgHrezszD/FbliCPjXf+Oxdin0BTymip67pKBEjT2ktKkWJZ+:70SDgLezI/FblxzZxQ0xy41cEjCkUkWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740904667, "uuid": "99bfd079-6e3c-4dc8-b00f-1fac114131b1", "value": 4151905, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904667, "uuid": "ca1a9789-0ac5-42fd-9b47-db08e61610ec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fa6eac4-f749-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1740908105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908105, "uuid": "2c5a17b3-198c-4d9a-9a61-4e72060444bf", "comment": "Malware payload (Amadey)", "value": "73636685f823d103c54b30bc457c7f0d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908105, "uuid": "51cb5521-ac60-4b86-bada-e4b9635aedb2", "comment": "Malware payload (Amadey)", "value": "1edc123e5a8ea5ce814e2759ee38453404d4af72a3577b0af55e8d99fa38ef1c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908105, "uuid": "081e4f3d-d900-46f6-b396-59e7631bb592", "value": "T1D2A45C217816C032D52191B11FADFFF295ADA9269B7109DB7BC40E365E202E37A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908105, "uuid": "2e66534c-c5fc-4ad7-a6e7-7e7527bf0f4e", "value": "738a9f5d52d683b5b6a4ba77d2da72af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908105, "uuid": "50614f4d-7785-436d-ac31-48c599b7473c", "value": "6144:P2ib1rFTRH6sf1kroyfIWjpTX335ilMSp01Hj6fGMWPsEY15sFBc9TT6N7AOs+OK:+ib1rFTRH6serb/p93j6fGMWP1N72h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740908105, "uuid": "6595d28f-ed2c-4b71-b0ff-7f083b6554b8", "value": 468512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908105, "uuid": "2224714d-aec0-4cd4-8e08-be0f843499a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af11b5ec-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740908560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908560, "uuid": "dfb4cf59-2923-4211-bd40-57fe30747c79", "comment": "Malware payload", "value": "8c9acc24d56dbb51b1ab6fa690fc219c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908560, "uuid": "caa2a03b-6d4c-4b3a-a168-fa84940fb42e", "comment": "Malware payload", "value": "e376b7d16131eaa7ab203ab214b64f780336986ef3fa28e80cc46f8647a87937", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908560, "uuid": "22acee44-c948-4897-8bc1-a4984ac74016", "value": "T1E11522DEC9442D4EE4112F71D0B35D3A85BBBE6628219C0AADF9BC3766334C6295AD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908560, "uuid": "df90bc6a-705c-4a03-9603-b5eb50666a9e", "value": "4db47062180d52dd06f8c279cad4c4b4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908560, "uuid": "e04eede0-f038-4759-9aaa-a26ef893f0e7", "value": "24576:kKJsr9jREoi4+1Q51YrW4ydp4X+MrD8RF982jDc/oYeT:3sr1W5ckW45OMQF982jDye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740908560, "uuid": "ec56afd3-a448-4375-ab35-a7f18b2b97e8", "value": 962048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908560, "uuid": "3d60034f-d136-49db-8414-e23029bfff29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9775edf0-f6e5-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740908707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "b3edb777-740d-479c-a301-2b6e5ec77893", "comment": "Malware payload (Mirai)", "value": "c25dc49634e6c848c0755f3786487630", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "c90c2601-6608-4701-a5d5-e97ea8b544d3", "comment": "Malware payload (Mirai)", "value": "b19e008bdad8a4ef5de7be487549330a56db75500104dd49f0bc1202e93dc152", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908707, "uuid": "bf10e7e6-b61b-4231-b219-6331e6a6ee0f", "value": "T137D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908707, "uuid": "8f182fc9-af4a-40cd-8257-d5a871d01c9b", "value": "3072:79eSuygEPjt6qkWqydymDnYMb0YBd/gQyVGsdqml6Jaj:79eSuygEPjt6qkWqZmH2laJa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740908707, "uuid": "13906d3f-155a-436d-aa85-d9bbf924b5cc", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908707, "uuid": "bc79ceaf-689a-40f3-b59e-49477731049d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0822437b-f6de-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740908707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "d5ca945b-bf9d-4c71-88f5-9c652927de15", "comment": "Malware payload (Mirai)", "value": "fdc488179c62d44ddda0b8809972d156", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "c35481fc-4cde-4ff4-b11f-5cfd82772a6a", "comment": "Malware payload (Mirai)", "value": "7940f811f5d64ab61def19d6885e669d27a804a7c614604576a7ce41c89f5989", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908707, "uuid": "b1de150f-1c2d-4148-a912-89c48d4b3ce1", "value": "T10504B71AAB510FBBDCAFDD3702E90B0139CC955B22A53B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908707, "uuid": "b01ca9ca-d2bf-4367-ac0c-25205ea562ec", "value": "1536:HwdqBezGeDxxeXJvkgBZOofcQq6K7yKshdUNmBvLZvU1SaZ6y985gkgXw5jxgK2K:HKpzGoe9kSfcQqW9v8SawFgXojl5bFt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740908707, "uuid": "0c543aa1-ca8e-4c8e-8d70-eff21b7ccc62", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908707, "uuid": "295dc1d7-8fd9-43af-9722-bda46d1501b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740909330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909330, "uuid": "35718556-f994-4178-9e90-d7052bffdc36", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909330, "uuid": "de640435-986f-4149-af15-b12456b48db9", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909330, "uuid": "e1d9ae36-4d1b-48c9-b26e-c9e6ab06a6ab", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909330, "uuid": "f591abff-2aeb-4aaf-96a8-bcbe1dbf3ee6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740909330, "uuid": "fbb614aa-f0a3-457b-a5da-55a89b6f3a6a", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd706037-f74d-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740909927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909927, "uuid": "4731d78a-c74a-4597-a854-3fd35b4e42f5", "comment": "Malware payload", "value": "e6eacf42631b14123ff33969baef4be6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909927, "uuid": "5270e3f1-54df-4857-b1cc-ec41458ab38a", "comment": "Malware payload", "value": "08872d3bc00c206216f7f0a5e6073aec8e3249aed74a548146057459d17274f5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909927, "uuid": "fed5a9ab-f139-4842-81f2-69f7f0f00ac3", "value": "T1BF06335EBC375A3EC4A46237E30D16C530BB9E7E21B4658EF38451D62DA3F802845B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909927, "uuid": "e409bf3b-d471-4387-a107-97a7122d570e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909927, "uuid": "e6814ef9-ee00-4aa9-acab-5cd30929451b", "value": "98304:ub6m/ImEX47TLTMLt3Xu2WkwI5QeWfp5Iqh6U3idSoaFfP:nmQmEXeXTMLt3XVWkdf4IA6UHoa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740909927, "uuid": "610d4f8b-281b-4f61-ae8f-cf987100091d", "value": 3978240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909927, "uuid": "20db9428-fd9d-48ff-ad57-039bbdc60854", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e9d4cc3-f74f-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740910653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910653, "uuid": "33db37e2-efbe-4046-af8d-d484415dec78", "comment": "Malware payload", "value": "3bbf0b5ce602c37968436a023cc118db", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910653, "uuid": "194d6ade-40a6-446f-a52f-5ef0ab72c7a0", "comment": "Malware payload", "value": "a6de5047cb976e8994381a9ed116944a6961cd9ee61115d52d2dfb3d05205d5b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910653, "uuid": "6fcc5aa8-9ab2-4425-8b91-9eb1f047aed0", "value": "T16926332F507B1939E58279B3F7AF95D8A101AD1F402BE96C9324E4A8DFFE3001526B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910653, "uuid": "d5079ba9-5888-45f7-b6e9-b5e6c86e07e1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910653, "uuid": "c42b68b5-3e5b-4562-a117-c3e9a99d528f", "value": "98304:weQGuMZY1rRmUg5ktryNTQv9uwVzyOQ9Xb3Apmn1twbH8WAyc:weQd1sUg5kteNTS9uwPQXbQpm1Gj8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740910653, "uuid": "26d8e6f9-1464-48da-a57d-9726837837f9", "value": 4739072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910653, "uuid": "5b2f3936-3432-4ffe-ab2a-2501af6031a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4851b5c7-e8b6-11ef-aa7b-82aee05be84a", "comment": "Malware payload", "timestamp": 1740911584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911584, "uuid": "45e6b0e3-c5a1-483d-98b5-1b5c2d18687f", "comment": "Malware payload", "value": "09cf4228a719407566ba36e026f81c18", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911584, "uuid": "56b0c43b-0799-456e-b65a-05354765ed35", "comment": "Malware payload", "value": "693b98f87bfb373b8e8c5e1c864fccd53cdeb8d13929255fc57ce210c501d9bf", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911584, "uuid": "85bfabda-5c46-4d3d-8481-cb285eb41d81", "value": "T1F2463A276B58EB4ED72421345DB1CEA867391C4A82DAA527B345F30DA4F20BC496FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911584, "uuid": "18f74865-a918-4c93-9890-2bfd82949489", "value": "49152:7fImWcIJ/PMjcme4PC6K18gx9Oy8XlIs99MbY0Ip2sUn1Gd3plFQWSZvHH:lmmenA/6vn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740911584, "uuid": "14f3fde0-a484-4de8-aac6-ad932448be0e", "value": 5767168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911584, "uuid": "39d569e8-a2ae-4ae0-84b4-dcd2f009d2c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e49bec65-f757-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1740914234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914234, "uuid": "d906b2c8-7e80-4fec-9878-1ea579877f13", "comment": "Malware payload (Healer)", "value": "50a4473a0bec46ddcaf586431f1d23da", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914234, "uuid": "611450e8-4fcd-48f7-8911-f8bf4f32aa7c", "comment": "Malware payload (Healer)", "value": "a77ea6a652a2e034f1892f61a84a63ff95c93add3046ecdfbd986035692810ca", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914234, "uuid": "2ad7a4b9-6968-4723-bf2f-44dc86114a8c", "value": "T1078533B41D230A0DD230CC71CCB48B1E6762B96365990BA7CB2C667F2517EDB66C39", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914234, "uuid": "5dbb7205-8c9a-4c22-8d3f-390f1e4f7c5b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914234, "uuid": "01627d7d-c8c4-4303-acc9-84553f9c4e06", "value": "24576:biBuL1PKR4E17CrJfQeJ8AiQRMlB5j2QB6myHtseOhIRT7MQO8VjRMlF8lRZpapC:bb1PqgJiQE5j3omyNsegIRTgItefoGs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740914234, "uuid": "8322b2db-93a2-46a0-b334-21a5b867a33e", "value": 1732096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914234, "uuid": "1edbb04c-abbb-4274-bdad-61d6de42a577", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c925d39-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1740914435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914435, "uuid": "c41a3152-f756-4726-88e3-9e054923b705", "comment": "Malware payload (Stealc)", "value": "d581e727f136df629cd51c65462b852b", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914435, "uuid": "bd77ea97-54a5-4e70-aa65-52f368e61cab", "comment": "Malware payload (Stealc)", "value": "110ee8c85088a270cacb547f30e432a23c9a9f41fe38806b0d152a5dcf50555c", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914435, "uuid": "a8b8c5c1-ab4e-4350-8b30-957ddc40a0f4", "value": "T13E85339E4CB00A34EC811D771C1E334FF378919E68B6AA81513B211FAA976B5FAE0D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914435, "uuid": "47871e4e-7095-47ec-afc6-824a6340b6c5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914435, "uuid": "c72d03a3-9ec6-489a-9367-930d22ac8bd5", "value": "49152:QIek50jxhbM3On2N8USnSU0ltEui5aVvNgqqlk:hp50jj2LPU0sUZ/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740914435, "uuid": "105ad605-0095-4e8e-8048-19a4f9225e3e", "value": 1802240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914435, "uuid": "a2fa1f59-b6cc-4f39-aba0-94ae4beac5cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96eddf79-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740914533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914533, "uuid": "1fac3ced-07ec-429f-9d81-90ca901c21ea", "comment": "Malware payload", "value": "fd76cf684d5fd842bcd38ec972d74eb2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914533, "uuid": "5d47b6a0-e1a3-4600-a639-5ba8b8d03cdc", "comment": "Malware payload", "value": "976c4e6c4e19a893c664510e4f2c0fd4b0d847a8737ad9746e83717e54fe9002", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914533, "uuid": "3a563f46-7679-4e94-8cf0-9083fa2c33bd", "value": "T1758533229C557B98CD49C031AFE7D230F274C1684CC9FFEECA19897F6C2269A6442D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914533, "uuid": "04dc41cb-7c70-4179-aaf3-f0839c07a628", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914533, "uuid": "65af8836-cc36-4348-8037-ac143206e2c4", "value": "49152:AE/z+qZCy1Lf9ddNmeDx52nyQ4UpvEid9bB:AEz++Cy1HdHDx5Zxmcm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740914533, "uuid": "b4a6a3e2-1196-43b8-ba20-200b38a0c8eb", "value": 1863168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914533, "uuid": "c137ae4c-9728-4a59-84a6-c56ae531e194", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5c3ab8f-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740914665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914665, "uuid": "7b24d0dc-fb31-4f0c-a86a-7666c54aa619", "comment": "Malware payload", "value": "3859b0d7e8d14ee41c400e2eeb104e25", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914665, "uuid": "641ceef8-1a75-463a-ab46-1d60952cc4b4", "comment": "Malware payload", "value": "7175446864594cbe59e362e4f49e7cb3d2ab9d36a17a5f5bb30b13d0191f3654", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914665, "uuid": "aebbb8c9-d5d5-4427-8b65-fd53c5f9a5f5", "value": "T19E159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914665, "uuid": "b947bfa3-8575-4274-88e0-41a8a8b1f413", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914665, "uuid": "d0cfc6c3-b156-4abe-bb34-ad115023c3dc", "value": "24576:zqDEvCTbMWu7rQYlBQcBiT6rprG8ay+F:zTvC/MTQYxsWR7ay+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740914665, "uuid": "e5da823c-1197-4f7b-9fb1-5dfa3eb0476f", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914665, "uuid": "65499edf-4fc6-46b1-9aa9-c9251319dddd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abda58c2-f759-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740914997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914997, "uuid": "cb9f66c6-f498-4dcd-84d1-a31acf57f67f", "comment": "Malware payload", "value": "32d0d20b49e7dee495c14a4f8eec636f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914997, "uuid": "bb25359a-4bfe-4e48-ad0f-0bac6638ccf9", "comment": "Malware payload", "value": "cbbf463955865ce04ac9c9e7b05fa2aa0b05c12ccebabf8394395d6d9f7e0005", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914997, "uuid": "249ada6e-c8e0-44c5-98fe-b8e144198f3c", "value": "T1A2E52A61B98872CBD4DB1274C17BDD437D2E03B90B254AC3E839A4BD7E66CC119B6E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914997, "uuid": "64bf3cd2-5c01-475f-b8b9-a9bf331c5751", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914997, "uuid": "8707b1f3-5a7c-4156-8045-f57eda3d66ee", "value": "98304:KN9gstMK/vdsEDpwM+wx5jN+9uAPCTznA:QH5B+9uAPqn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740914997, "uuid": "2be3ce50-17e3-4468-9ed8-05629ffa707b", "value": 3149312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914997, "uuid": "bbaee40b-702b-498e-8570-1f67f490aa50", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6db7a7f6-f75b-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740915752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915752, "uuid": "a407c337-382f-406a-97ad-72907380a607", "comment": "Malware payload", "value": "8ebcbfb7fde83cfb01cc0f14950ee3d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915752, "uuid": "c4f6b6ef-d3de-4ef1-928c-771bc5fdaada", "comment": "Malware payload", "value": "1810cdf9ad3eabe0910b6dcb2372822cb326bb3fd31edde9320bfccac2119e37", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915752, "uuid": "322e5b5a-1e77-4435-ad51-d63727985313", "value": "T13726335BFA379B3AC99EB570E3DD05E90A092E0FB0B4008E9B18B5985AF4755727F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915752, "uuid": "425c2f7a-d4da-4c95-8e93-d79c8d2c1197", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915752, "uuid": "cad42fc8-150f-43ed-8bb5-1ac44274cfd3", "value": "98304:CjoKgASAHfbMCAtVcqPBAtvgTLY+hViV6nEY3IFKr9kAkVexrM:Cs1wjDAtGqPWZgo+3iV6E4fr9khVe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740915752, "uuid": "37bbbcf1-8de6-4834-ba67-562b8da48cf4", "value": 4706816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915752, "uuid": "ee109494-2a34-489b-b1ab-b14e057d0422", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cc557d7-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1740916126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916126, "uuid": "78171278-2704-438f-ad5e-361963035a99", "comment": "Malware payload (CredentialFlusher)", "value": "efbb5ae5c92fff7d0be32614ee208184", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916126, "uuid": "0d2cada9-152c-4d3f-b190-d878536073a9", "comment": "Malware payload (CredentialFlusher)", "value": "a5e45606f87ed7b8b0014ef6893b02199291aa37021a79bc1e951742824ab2cc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916126, "uuid": "80fcfcec-b9fe-4be0-82af-df03daeddab3", "value": "T11825AE0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916126, "uuid": "3524aa8e-8c97-4a1d-9c42-38ac29e7f665", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916126, "uuid": "fb515712-1d83-4ecf-8244-8501fa46d474", "value": "24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8az6int:dTvC/MTQYxsWR7az6i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916126, "uuid": "515679e1-8ad3-4af8-8900-3203470af9aa", "value": 972800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916126, "uuid": "b35f9ae2-b754-4a0f-b6ec-0f1dc76e04e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bee1d941-ed9d-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "fb384bde-0c69-4d8c-a990-682bb4531c1c", "comment": "Malware payload (Mirai)", "value": "27fcca0043a2d0fa3b8c1474ba6a347b", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "8f2f341f-938b-4395-9f93-a140fead4378", "comment": "Malware payload (Mirai)", "value": "c518491ac679b646db6f34599a0be7309b7ec2cb6cd39dd97c46bcfc69f78098", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "303cf860-7cec-4b8d-abda-cfa47c650448", "value": "T16FB2C03C2B111B98DE1EC0BE839D1B103DB81B75D1829D8B7206ED979F9A8747453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "4f3e2536-f00a-4a7e-8ab7-083bc54bdd90", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuicqmdtJgGlzDpH7uNj1JAu:YeD8ZSWvZHZbs1row697qohQvg9RitJY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "eaac4512-db8c-4e1c-99a1-29b2eede8768", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "8a414a08-7504-49ab-a77f-9d88c9a8855d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3c8a7c1-edb9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "c58c0d10-1dd1-4851-95fb-6fc972b81924", "comment": "Malware payload (Mirai)", "value": "f6f62476e54629a3ef494d918cc2a921", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "703e53c3-c29e-482f-ae32-2b6453ab14c7", "comment": "Malware payload (Mirai)", "value": "9aeec2bcc4f00c0458d786066d910827abdfe95f441a2ade518df222efb439f5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "a2e3b01b-9750-49cf-a4ad-20957c82ce12", "value": "T119A2E019BF28818FC836297555D9E5D21393FC61F2ADCC096940C16FB5A33A92834F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "5ef4e94e-46a5-4b8a-91c0-a8292f895926", "value": "384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTR:O98o08kxofBE+ZkXaITbp2F2TWul0c5F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "e1175c23-a296-4348-b432-08f68c1f7540", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "0d1af051-b61b-4913-9a52-5a354f04515b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3cf51af-edb9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "d482def6-49c4-45dc-9489-5bc9de6c5f16", "comment": "Malware payload (Mirai)", "value": "53de9bce673256e49365afbf7d63ee40", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "d33fcab7-97df-4e12-b14c-c964e807b194", "comment": "Malware payload (Mirai)", "value": "4e61500b419725a0d0097c194d6668f3c148e1a5ebbc66d5786c325192513e7c", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "4a393c6c-75a5-49e8-bbfe-b25ad31a8d2c", "value": "T191336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "a83988fc-21d0-44e0-8bae-4bc8a6ac7d7f", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "d90703fa-3799-4b5c-8725-b5b489d77c42", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "f47e07fd-5abf-4a54-a938-931c12b84c24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bef0dfce-ed9d-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "0b2b2f63-9177-482e-9d65-43dc1402fb05", "comment": "Malware payload (Mirai)", "value": "617b5ca8e565db53d7300192400dc76f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "289e8eef-a984-4b13-95fd-d13115e38074", "comment": "Malware payload (Mirai)", "value": "fd359bb4e2dd8f443410fe2ba03c920d3c29289933dc603125e3fa8223317b50", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "a970327f-1b1a-4ceb-a219-f7c69e063bee", "value": "T1EA432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "b366ca89-4141-475f-8646-898803e35bda", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwW:RqtmZPuutfbltZFBSJsBcfDSTFI+BEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "57a78dbe-10d0-4c19-b0c4-454bb78ba4e5", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "af15c527-2fd6-42b7-b060-8c1c008c473b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2060a540-edb9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "f9fa9a07-acbc-4e20-862a-fdb841039407", "comment": "Malware payload (Mirai)", "value": "dcaa168f825b4543ce33307937b53071", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "93ea0b81-20b0-4825-950f-79421190520a", "comment": "Malware payload (Mirai)", "value": "8eeec109b5ec97df8ac531e388497586da82f5a51b55a71eb6eae70080e2fb13", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "79422212-ea8f-4750-ab6a-019b1a0af378", "value": "T1B582CF3061AB34F5CBE14434EAAE8EC6A7160BF8D1FC36D317596F78894110621F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "322b85d2-d4a7-4ab0-8d61-f708a43695c3", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaDihymdGUop5h5l1:6GV0P6+kom0tVAoNvm+to1+s3Uoznl1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "a166f207-964d-4abe-b451-923f0c408ee1", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "d752c5a4-a897-4e69-ad10-2b8561587750", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3d4e80c-edb9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "19f9c7fb-5514-456e-8a17-dcf506ae3e9c", "comment": "Malware payload (Mirai)", "value": "d1773f70195419399bcdc1eb6a11a4da", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "24751c23-7241-4f74-9e92-0e20de4a0861", "comment": "Malware payload (Mirai)", "value": "4ad92443477cc1d67f4327ea1260730825b4ffb947ce75682f263f0c45a472a4", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "956e886f-24e3-4a9b-b424-637498313a35", "value": "T141B2C0CC61443184CA8D7C7C178D4A664FACA190BAEDDB16E350CD98B7BEA4B345D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "b9781c1b-f976-4c11-85c3-8023f7e35a2e", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBp3KZqEWvS:/QlS07FUXqIYSXQKqu3+qg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "d6af0e3c-7e71-4794-aea9-d859b2855627", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "925efb5d-8212-4383-a0c3-0801d5fa8ffc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3d727d2-edb9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "27f53708-959e-4f29-bb8a-4b0284939ce9", "comment": "Malware payload (Mirai)", "value": "8bb305b14afad8b014a82bff39e845a2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "859f74c9-a63e-43f7-9381-8aff64a118d8", "comment": "Malware payload (Mirai)", "value": "09f7c2fcefacc1b89d95757afd0a4cc66ba7f3fb459873d9c04e71ba1090ae62", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "386a4e8c-5ca3-4d09-aa7c-f4f442042bef", "value": "T1CE330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "860aae5e-ba62-423c-b42f-63ceee4a9b71", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGe:r/hqaJMDg9eqK806MHdkfQX6HuCe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "d6d52a79-6dd0-4dc6-afec-ebe24509529a", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "383fffb7-2fbd-46f0-90c0-6e54f5c41664", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57618063-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "e15ba162-1a3b-42fe-84a8-8264e4126872", "comment": "Malware payload (Mirai)", "value": "6dee657f9ccd443f198240284d401140", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "bf9fcd3b-e9ef-435f-8338-64dea378a644", "comment": "Malware payload (Mirai)", "value": "b4fd2820a43bfae133d0988fcd3faedee36d2b853321c65a97ad5c409dbbc569", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "5190a4fb-dc8b-4877-bdfd-aedaec64ef01", "value": "T15911D3DE236001085ED90ECAB096E9ACA3C98AF66CB626DC636CB875738C9147215F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "0cd95ba1-f51c-4445-8911-b59759091981", "value": "12:KUO6ZUINIoAAURZKGHUkUXUejUejUScDKAU9RQUIyGcAUR:baINIhzKjZkegegScWl9NGoR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "84ea9490-a5ba-42f0-8293-b43c8c34f054", "value": 1029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "d86eb136-9947-4821-85b8-32290b22c8b9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5761b2e3-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "341033ac-4a60-4dd9-b99a-8b9ba43ebdc9", "comment": "Malware payload (Mirai)", "value": "7ecbdf8d1a142ada22a22314f23871ef", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "f1398449-a4ca-439f-a66a-fd684ad3f72b", "comment": "Malware payload (Mirai)", "value": "22272febdee6a0b111c43c62680efb232687533aa4f5d9fbdb0687669e64332a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "26ea7d6e-1dc3-4a27-8693-041daf58e8ba", "value": "T18211C49C37A0158A6FD91F8EF196E59CA3C585F6ACB62190F33CB834638C2003114B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "322180e9-c881-4839-8b85-c451c9df8f81", "value": "12:3J3nQt6ZQVNIoAAQGZKGHQzQIQDjQDjQ5cDKAQQRQQpyGcAUR:3J3KNISKUqucW3GoR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916144, "uuid": "fc77fead-2cbc-4149-a62f-d12e4b84441f", "value": 941, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916144, "uuid": "1367f799-e470-4875-99e8-0494fb727dcc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20651488-edb9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916145, "uuid": "c72c81cf-9c97-4f6a-886e-bd7de439479c", "comment": "Malware payload (Mirai)", "value": "cf6f277c7057b857108d18c85c449163", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916145, "uuid": "6aca1e50-9a53-41af-9b83-f583e65a06c0", "comment": "Malware payload (Mirai)", "value": "5685d2dda12906863f3f2d7b0e5be26af30b7b2fd099e52469e6ea81436ba0cd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916145, "uuid": "621d26d7-4a77-4aae-b51a-6af7055a0a90", "value": "T1BC230271850E9EB124303C76DBD9D79376E12AB1C6673023C6290A383F756131E5BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916145, "uuid": "49c40bc8-47e9-40d8-a92d-91b467ed3f0f", "value": "768:g/TYCoIxdEk+AxoTZAZHFeq8b3K9q3UELbUXfi6nVMQHI4vcGpvG:gECFd+A6YHAx/LRQZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916145, "uuid": "bb986f7d-3734-413e-a73e-e6055e51beb0", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916145, "uuid": "fb04dbd8-a399-4a2b-b38c-4413dc96bf53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bedeaf0c-ed9d-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916204, "uuid": "8fb9102f-16f6-4f70-9f63-07b18fd1d2c0", "comment": "Malware payload (Mirai)", "value": "e1486b15c9660107324bd4a273ab93f6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916204, "uuid": "78c33fe8-4003-4584-b35d-9108b2277ead", "comment": "Malware payload (Mirai)", "value": "2ade500e41fd43b09c288ad829e79a19d8b59b14b900facba7b932fcd7f72c48", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916204, "uuid": "9709f871-daa4-417e-afaa-29d2beacceb1", "value": "T19AA2D01572632D66E3ED1C3CC86A8367B9A70BFC90F6327679415620C94D24A3E39B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916204, "uuid": "511590c9-8f68-4924-a35d-c91211322d95", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxj3hymdGUop5h0:vvQn4j+ZO5fKAlxjs3Uoza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916204, "uuid": "cf258519-929e-4ae5-862c-62df5d4273ec", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916204, "uuid": "6aebfe93-8e42-4683-be0f-4150ea502642", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bed6c34a-ed9d-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916263, "uuid": "1294d705-efda-4426-95d7-3c467c527016", "comment": "Malware payload (Mirai)", "value": "c6ed5853539af50afad4c87979c7e8ff", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916263, "uuid": "8dff4c00-a8e3-4e6f-94e9-677c11282102", "comment": "Malware payload (Mirai)", "value": "39da332e26c6789a0de6d7c7d7c8218896271b04a36ba98e3fdbade3a46199cd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916263, "uuid": "534def46-66aa-49e8-aac8-b202b5152065", "value": "T1C5C2D1E0B726FA31C4206C3DE52A4D8A3A51067C91FF353754258C398FC1A4B77B84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916263, "uuid": "18f5bb93-52b1-4384-a42e-5d196bb76ab5", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwr49q3UELuG:NKy4qfqoeJdXWghL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916263, "uuid": "915fa55b-9544-4779-b558-6e180d874ddf", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916263, "uuid": "3f503e21-794c-47fa-9635-f0ec133ef44b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faed8cae-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740916419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916419, "uuid": "2d62c9b5-1d3e-4804-ac46-10ce29521b51", "comment": "Malware payload", "value": "51cfa1962aca998856c05a61b3e72d49", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916419, "uuid": "b39c29b0-51bc-4bd5-9e29-4dcedd6ebdbe", "comment": "Malware payload", "value": "40781209977c562c6a39fc4376baa7a608f0488779eb0f872008e51c54bc8775", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916419, "uuid": "c0f50fa0-10ca-4736-beec-642ed2c64aa0", "value": "T1AEE54AE2B50525CBE48E1B7C952FCD935C5D42B9072088D7E8BCA47B7E73CCA16A6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916419, "uuid": "2faf1df0-a748-439b-81a4-254c8517b7b0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916419, "uuid": "34de2b17-d763-42d7-9873-da97bac51a38", "value": "49152:zAi+FxOLa6e1BPwxlZXxWN+3HDmxAVT3XQwx:8rFYLPe1BojZXxWsDmsn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916419, "uuid": "21f8e59f-c518-4756-8bff-0b435e72b930", "value": 3172864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916419, "uuid": "68bb74a5-60fb-4267-a899-d474cf7905dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56277013-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740916572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916572, "uuid": "2091e363-a62b-4004-8e4b-b390dc701669", "comment": "Malware payload", "value": "4f35c2f27be74ce5c9ce5286d0d87fbb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916572, "uuid": "fe22f401-3ff6-454a-9b8a-752c9d5249ca", "comment": "Malware payload", "value": "9c37822669d2ba7c588b7dd269308b7531ca3d571ea19ab30f7dcd772530dd0d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916572, "uuid": "1980f2d6-6edc-475c-bbef-d60c4648c026", "value": "T14206334EAFBAC731D985B432E79D01F8262E6E0F30249F9897A6F15424E37527243F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916572, "uuid": "92b7f42c-d08a-4699-94a5-f0c105b0b4d5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916572, "uuid": "ffb10667-8345-4164-b798-4e1ffdb87e13", "value": "98304:3PznUIZ+7cbj4JAHg+qPI0fAgsLqzZtWFZaZIpQnfLU:3PQICSvgTPZXbHWFJof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916572, "uuid": "b803e112-aace-4c60-aabf-04e5b5a85079", "value": 3932160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916572, "uuid": "cf6e4afe-5b1c-462d-9125-03a303fcbe40", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d621d42c-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916786, "uuid": "02d09282-221e-4ad5-bfbc-a8f90574c535", "comment": "Malware payload (Mirai)", "value": "cf6b4c665a4914654ab757b6a9104d77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916786, "uuid": "41add556-c82f-4454-bc53-ea3931736372", "comment": "Malware payload (Mirai)", "value": "6b35d90702dd58ba8f0c3c217c17a04a0d250f75535aba7dd478dbece6163cf0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916786, "uuid": "0c1f7e6e-0b52-48c8-a961-d4be01fa4ae1", "value": "T12C632951FC815623C6D1227AF76E468E372623E8D2DF72139E226F21378681F0D67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916786, "uuid": "9b21782c-ab80-4621-b27b-2829ce0b0d67", "value": "1536:kaSG5qx8p6F2IA4pXk46PdfxrGHlju3Rt3lSAYg:kari2JO0nPZxr2a3R/SAY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916786, "uuid": "72d33e4b-3047-4d9c-9a5e-886d677617cd", "value": 67072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916786, "uuid": "bc65bc45-6bcd-47d0-87b5-d04747a45830", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "039ac24a-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740916863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916863, "uuid": "38858dcc-748a-424a-8a66-9b806961baf8", "comment": "Malware payload (Mirai)", "value": "fca24eb52cae3fd468c27620f8fd61ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916863, "uuid": "10a114db-8c9e-4085-bc00-529095690211", "comment": "Malware payload (Mirai)", "value": "b310f4cc89feefa68be60c708207956dd0badcac1207b53147810d8a3293f8bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916863, "uuid": "08efb0d2-c520-4ad4-a5ca-8a5f7f7fbac5", "value": "T1DA731956F9815B12C5C5027AFA6E118E332317F8E3DEB2129D206F2077C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916863, "uuid": "df876498-3447-4c14-9110-a533dbb48beb", "value": "1536:/jnZRe5pACUWiyxHdqLwf8JsomaEaPbQeMGiVDhWOaI5GYIA7:vebAxWBxewEJsomaE/DhtaIoRA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740916863, "uuid": "d8af9e8d-8f79-4a2a-a544-12ccb4f82b49", "value": 76272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916863, "uuid": "501a93d9-95d3-4d57-9b35-9a56d29c2ab1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64c617e5-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740917026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917026, "uuid": "8eca1365-1eba-4ac7-b866-94e557a7f652", "comment": "Malware payload (Mirai)", "value": "88d25ebfaf186b7a3240f0490081521c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917026, "uuid": "d27b191a-a91f-4f2a-bd5b-6626b9a2319c", "comment": "Malware payload (Mirai)", "value": "fe3db68d64b4214bda5b43ecaa8ba0fa837971db28b4dea8a49ccaac7cade8c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917026, "uuid": "d890b786-65c7-43e4-85cc-cf30a2822cd9", "value": "T134E33B56EA414B13C0D61775F6EF42453323ABA493DB730699286FF43F8279E4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917026, "uuid": "07a00775-1ffb-485c-8a94-74b62518ba2b", "value": "3072:u5OXj8lUCgk4GEVaqtXcn29EmFQv7IFkAy4zO4qM/9F3BQN+:u5OXwHgkhgaqtXcn2ymRG54zO1M/9F3f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917026, "uuid": "c0d6edd5-a4ab-4976-9a25-256f918beefa", "value": 148210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917026, "uuid": "7b70c9fd-a999-477e-aa6e-a0cf5b03e092", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c839a1a2-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740917192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917192, "uuid": "51bc058a-e856-4a58-ad77-779932147f10", "comment": "Malware payload", "value": "0842b673da6f647b37b9d6ad53f5e49f", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917192, "uuid": "252e4caa-ecc2-4956-a139-dfdebf073163", "comment": "Malware payload", "value": "a8fe751ea851975c139121f9335343980a82201f4802b4b27c73f6dd74237b4c", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917192, "uuid": "e9d3217b-e628-4850-acf3-9d5a9e721479", "value": "T1A744A4B13708E482E59E01BBF780F121B2317C75B7BEC5892561E9CA8DDB910F95E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917192, "uuid": "d1b6eeb5-02f9-4679-a72f-ac411e26cb5e", "value": "3072:gKTQP5oPQbuBO5UbJgGH9bDJ15O5UbXo:/TZIdiNgGBDJ1Qizo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917192, "uuid": "84ae9686-7f88-4522-8239-37a0b3f0524b", "value": 269648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917192, "uuid": "2b7797f8-2f98-4df4-9404-ac37f9706d7b", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da123c3e-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740917222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917222, "uuid": "6128ea51-9b89-457d-bef5-7ca91bc57bfc", "comment": "Malware payload (Mirai)", "value": "53f368095a1ebd81e4eef22b197ddba1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917222, "uuid": "024ba7d4-8f4f-48f6-97e7-2be979a0e814", "comment": "Malware payload (Mirai)", "value": "42f3d5c4435a814941f65d0570b6b464a9b84e43d844a2c783867751b9ceafc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917222, "uuid": "b42ad2d3-2cdf-425d-b98a-8d52159ad30f", "value": "T154438C37D82A5F54C1864570B4A48E751F23E5CC83532EBB0AA9C2B65493DACF909F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917222, "uuid": "5ce89d85-02ae-43de-9bc5-09bb6881a790", "value": "1536:oAJOaO/W11FgyqC9s/mRnm6xAWoKZphnKQv2iCZd+RwY:oAJOaOe11FgyqC9s/mRmUPZp9v2iXRwY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917222, "uuid": "21cd194c-8a72-4494-8638-4050e883a748", "value": 58876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917222, "uuid": "4de1cd70-4768-4151-ba7e-cbc465dc4606", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2074bc2a-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740917341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917341, "uuid": "15afd1f2-98e2-4440-8155-a47b98a8bf32", "comment": "Malware payload (Mirai)", "value": "fa461bbf3cfb2854e3b71a7f9b7f23bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917341, "uuid": "3cc5ba53-c1cf-4044-bb14-9ad73a73d1a0", "comment": "Malware payload (Mirai)", "value": "4927f935d1fb1b468512bd3b3d5eea712da908de1843fa99281f2e3f111cd157", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917341, "uuid": "21fdac4b-4a9f-4e61-a932-bb515df1af84", "value": "T106435AC4F64BD9F1DC5705B02176EB379B32F5F41218DA43D7A89A33BC92612DA06A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917341, "uuid": "ce6c2647-00e6-4240-980e-84150681affa", "value": "1536:FV2I2pboNTta/YllFEewnupYZA51r7E3sfSy7:FV2I2pbQJLEzncY2XXMs7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917341, "uuid": "7455020f-2aea-4885-b7cf-97369a4e7b2e", "value": 58672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917341, "uuid": "84d25f48-347c-4d71-b5f6-d75ee7b7eb08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "323e7fbc-e91f-11ef-8aba-82aee05be84a", "comment": "Malware payload", "timestamp": 1740917346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917346, "uuid": "9f667b22-4164-47fb-80cf-c8cadebdf78b", "comment": "Malware payload", "value": "00fdb739c19c8661530d6226bb60105f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917346, "uuid": "e837262a-b094-4c30-a14a-e1b238f6c2cd", "comment": "Malware payload", "value": "297737736bc1266da35a5543f4fda3d2de1472371e277c43ac4c1da0c7d4aaa1", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917346, "uuid": "f8164749-d637-4cb3-9501-c8fb3a400d87", "value": "T15446F705AD842BE7C42C4F7495E6CD6522B01E140AF14B3A26A5FFE9BCB62747F039", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917346, "uuid": "0256419d-7054-4b4c-adfc-ccc0e3e1b4a9", "value": "49152:YzYDt2QsZfbpswDWv796InSJQ3JljeVOl:Qsw6pnoAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917346, "uuid": "b4423e4a-5d39-4383-9fb4-db6d83c5818e", "value": 5767168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917346, "uuid": "1e70ec4c-0fde-4d8a-a2d8-b8e3c4afda7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d7c2503-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1740917416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917416, "uuid": "5cd3e732-b6ec-41e5-8fd6-05a088a286cd", "comment": "Malware payload (Healer)", "value": "5ecbe81e8bc0a3b0e529b63c992a4aeb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917416, "uuid": "1aba1a37-5d67-4e73-ba25-74dd3205d9c8", "comment": "Malware payload (Healer)", "value": "5360ec61842b7784fd53accff913bcf2a988d978160ebe5565602ac22eaf185d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917416, "uuid": "b1ebdff9-1b8e-4a27-b589-e84640cfa53e", "value": "T16E853320A8892478D4CCCDB7AE0240DB27F0B3B61C2D95B74AE45707D417B5EEDE94", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917416, "uuid": "03e150eb-d6e8-40e6-9de5-be642702893d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917416, "uuid": "02aac13a-dc3d-4a0b-a9f1-0b66636014bc", "value": "49152:NYQ/E6YS5atg4XpjlO2pXkXj6xZ32/qc:NYJ3Dj5jVpkXeL32/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917416, "uuid": "406cdaed-8a1e-425c-afec-222b0b51e633", "value": 1743872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917416, "uuid": "abe979c4-52ec-4dee-8924-0afb556b4110", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "890b7e9c-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740917516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917516, "uuid": "fcbcb5d4-5f0c-4a1c-b57a-8fcfdb156970", "comment": "Malware payload (Mirai)", "value": "bc54950e0770140f7ae67775167511f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917516, "uuid": "6049619b-4256-42a8-ba17-a2a72356cb3e", "comment": "Malware payload (Mirai)", "value": "1ce7971915d72dac24df5321645ee8d4cd90672f2aaee56db3a4b228dddcc2e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917516, "uuid": "b5161d13-f556-4fd1-81f8-270b929285a0", "value": "T172633851F8815623C6D5127AF76E428D3B2623E8E3DF7207DD226F21378682B0D67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917516, "uuid": "135cc10a-6e59-44af-bd73-49a3d1b6faa2", "value": "1536:8XK8OWaL1oKgZA1QladFT2jk4TrJnzhJB2vl4v3AY:8XK8BWSkvyjDTrBdrt3AY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917516, "uuid": "e6a2a8a1-e532-4759-a1bc-8156d659c9e7", "value": 69204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917516, "uuid": "73468101-8b82-40c8-8957-d7b66831c58f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "994ed62f-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740917543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917543, "uuid": "caf626da-cda0-4dc4-b7ca-f95e3b848fad", "comment": "Malware payload (Mirai)", "value": "2639ecae5b6fba5a2280a464131bce63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917543, "uuid": "3973e17c-9c50-4a25-b58e-0bb3cb72f4ce", "comment": "Malware payload (Mirai)", "value": "5887fea104c227e6c9795946c42643fccede449fceda6635c65e68988978e9c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917543, "uuid": "f8bba7c1-86e7-4547-8673-da7f84e9e7e0", "value": "T1B5632A9AF401CD7DF80BD77B4457090AB630A3D216831F3B639BB9A3BD721951922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917543, "uuid": "b435b712-30ff-4499-b608-23f02aba38c4", "value": "1536:kzimSoCQoCkjSnSkaDg81gt/6JYU3Dzg6rVfDqNQgQfdS:kzimSoCQoCIgSkaDrJ53Dk6xgsdS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917543, "uuid": "fc085b0b-ba5b-41d4-8fd4-3a48177614ad", "value": 73064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917543, "uuid": "dc512e95-46d0-457e-95e0-b8e9d7f95ebe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3b6fc96-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740917614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917614, "uuid": "fef9efe3-00c0-4029-b206-a302a378250b", "comment": "Malware payload (Mirai)", "value": "954d3df1749fe737cb43046677716c4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917614, "uuid": "75e43a5b-a9ab-4802-a8bc-f89b1e02c194", "comment": "Malware payload (Mirai)", "value": "5b65b0c7eabbd3921c1456c9ec530a35617af7ea6aa65d4027a9c08502e4e4b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917614, "uuid": "4fdcc546-670e-42f6-a96d-4b1aa8f9422a", "value": "T11793C616FF520FBBDC6FCD3746A81B1128CC554A22A87B3A7534D928B61B24B49F3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917614, "uuid": "a373b207-cac4-4984-a90b-2224f553331a", "value": "1536:Y3Op9g+ADDUJXNfPTNlMbAp8ItKv13ZSNhDbj0QeAAQG:Y29g+ADDUJXt8gK93cteAA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917614, "uuid": "0ccaa39d-a446-4ce1-b9b2-1d97a5ff2800", "value": 88956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917614, "uuid": "df8493c1-4d8f-4b29-ab63-cb07614235af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0126721-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1740917689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917689, "uuid": "446de05b-4602-4f52-bb95-80d0188e9964", "comment": "Malware payload (Stealc)", "value": "f463d641f6d9d1fc3e59f366864a8620", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917689, "uuid": "36843944-7807-4f8d-8021-ae1394cd2a9b", "comment": "Malware payload (Stealc)", "value": "8bf6ff7161f5034cf713bb264250d46c727d6a2a25ba12c259912c1d9fa4045c", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917689, "uuid": "0f0de049-c7d4-4647-84cc-460b7b54c788", "value": "T14A85331D0C8216D5D90519FF13CE1A68C3785FA445FE016A9F0FE3237EFB34698A29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917689, "uuid": "9e3c03a8-6027-499e-847e-2a9407e2ef7c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917689, "uuid": "18dab599-e08c-4e10-ad91-e96b80015364", "value": "49152:Rox5TBcKdWJe+aIpC3HFL8erSY2ZCgQVwRZoWTtJIr:RStBKJSICVL3rSYtVGoWpJI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917689, "uuid": "4843a7f3-7e79-48e4-a8bb-733dd7455a6a", "value": 1812480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917689, "uuid": "b05d0ba3-f433-48fd-a36a-4d195382272b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88ff06c0-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740917945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917945, "uuid": "4d02549e-cd1b-4ac7-ab06-3906c8b32c0e", "comment": "Malware payload", "value": "6145e7bc2e3f8482b5f6a82ae39f1a85", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917945, "uuid": "0eaf08c2-3503-4581-b416-ce7b56a6adec", "comment": "Malware payload", "value": "f91b02f16a70ca05e70338d60e47c166a77aea22d590566cc35419cb02e6f060", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917945, "uuid": "dfa40dde-bc3c-4cdf-86d2-16b0a368c262", "value": "T1A5F5BFCDD1BE00D75C053FFA98181BC78B2947768674001436ABBD495F6B8FE805AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917945, "uuid": "fb3e2124-9456-4728-8b64-76e65b3a0ced", "value": "24576:p6tivoFnPbOQdtUzXbRS0Fmx295E04PXYVBFuVki/PK2NxDkGZpYUt5oGSeO496C:S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917945, "uuid": "f8902838-0f2d-4fbd-9599-b8ae4d089aa7", "value": 3480645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917945, "uuid": "6ff9aa4d-1f1e-4e3c-be2b-a20b2defc11d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89b056fa-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload (SystemBC)", "timestamp": 1740917947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917947, "uuid": "cdcacf83-f217-4236-8f19-6252ffc8bd14", "comment": "Malware payload (SystemBC)", "value": "9218e5cad03c752f237ed87a9e52def4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917947, "uuid": "d3f20a02-80c0-47c8-9586-1bf67b61cd8c", "comment": "Malware payload (SystemBC)", "value": "833610e95cc965e70096620e0adaa8917963df9f9ec56e00af1ff331161a7971", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917947, "uuid": "d95252eb-fbb8-41e8-ac8b-c28de4ffc423", "value": "T157853342DCF25EB1F858587EC2C283829B7D0E9A4C78FAE83485D11DACF3B5231965", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917947, "uuid": "dbac10e7-82f4-4a90-8859-058e1f1e0eba", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917947, "uuid": "05447fa0-2bf0-4611-94e5-788568706f0d", "value": "49152:NWiPyNzLHax6WxKPQx1GyGe4/xU7VNT1xMJ1NxjnW8EtVO:NhGW4OOCbhGQK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740917947, "uuid": "b1bfcb7f-5c9a-4cd6-8947-cc72b0b7b356", "value": 1774688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917947, "uuid": "4d720f60-3d79-4876-bfd0-3baff254e3b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acd44d07-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload (SystemBC)", "timestamp": 1740918006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918006, "uuid": "ac5cd97b-28f3-47fb-912a-5b7c8e79d723", "comment": "Malware payload (SystemBC)", "value": "598cbb4775bec2b1aac2cb43ef00321e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918006, "uuid": "81689266-1c1f-484b-aa06-f6c33ff10995", "comment": "Malware payload (SystemBC)", "value": "a89977186920e1f4104c034b686663b530fe1df480632685301ea0ac643290de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918006, "uuid": "efbd138d-517c-4d2e-b118-d498ea2c950d", "value": "T173853392042C24FBD54A55F4859B8FFFB033EA031B171A2A9C99921CDF437B869CE1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918006, "uuid": "b2032047-6c1f-46da-9b22-3eaf94d37e87", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918006, "uuid": "b999faea-97f0-4f36-9adf-e91f63b6a3fa", "value": "49152:jLh6WsyHqDBOGRlAhKQIVI1FxBH3V8w+G30dD7RKzu:PYqqDBPRlAhKZcHBXaw+dZdKzu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740918006, "uuid": "d0c92230-effa-4f9f-84c5-8fc67dd97404", "value": 1740320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918006, "uuid": "3213eeb6-8c16-4439-bf97-8b5769ec8a17", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adad919f-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload (SystemBC)", "timestamp": 1740918007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918007, "uuid": "4f15a8c1-e0a5-4a88-82ab-27f9870fd162", "comment": "Malware payload (SystemBC)", "value": "775d48c5ca9cec5cb17ba4990e100b80", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918007, "uuid": "f6bf17ea-1a11-492f-a2a1-af4f0c3503be", "comment": "Malware payload (SystemBC)", "value": "ee071cca5d50fc83f595410cd64d06f2c438424497bbafde868ee2356d8886a6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "bf8f894e-a876-4874-8079-66a6d02b495e", "value": "T191853342DCF15DB0FC595C7AC2D28382DB7D0A8A4C68EBE93585D11D9EF3B42318A1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "d2ead731-219b-463f-be8c-c5e15b8b43c4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "d8803b5e-cdfc-4ac5-b7bf-eb83555838fb", "value": "49152:VWiPyNzLHax6WxKPQx1GyGe4/xU7VNT1xMJ1NxjnW8EtVG:VhGW4OOCbhGQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740918007, "uuid": "2e37404d-da82-4d4c-b85a-2686d1d66b71", "value": 1782888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "e5a90f7a-779f-4a91-ae76-fc164582c367", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adb4fe2e-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740918007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918007, "uuid": "66425cc5-c3b2-4fb2-aaa0-49cb972acdb9", "comment": "Malware payload", "value": "68b7b75d960166f6411aab873f9430b2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918007, "uuid": "dcab0757-0740-49cd-985a-57c273017d13", "comment": "Malware payload", "value": "44d9902a4a91defa468b2ba35bb9587bb776851933786ff5f34f7675a3eb68a0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "45172dec-386d-43f9-a3dd-99b581a086e8", "value": "T13AF5BFCED17E00D75C052FFA98141BC78B2846768774401436ABBD895F7B8FE805AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "81736d56-22d7-40bb-9bf4-1d5548a2e87d", "value": "24576:PWTnLH/Pwm3QptnndYKX4GXrkAFG/zRoWp4LYPKYpzlhYZSvmrDggv9ZYMk5B6E1:S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740918007, "uuid": "c3c2a34e-ab5f-40ab-bcf6-bac58230fe6a", "value": 3565781, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918007, "uuid": "1dea45e5-2a07-4020-8824-81e77ab3ae3a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05a1f8cf-f761-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740918155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918155, "uuid": "58e07f50-b691-4ce2-99ad-57216ee95a21", "comment": "Malware payload", "value": "dfe81cfe22f8a8157c95e646f6554f8b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918155, "uuid": "73fc430d-f3c3-4efa-b70c-5a8d46a70ae8", "comment": "Malware payload", "value": "fa4c68e8cd086533b8b9b3005b2fa42076fe9c03be8a6691d83e1a519b6961be", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918155, "uuid": "25de16ce-73b4-433c-be7a-5b8d7fe8bb71", "value": "T10B159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918155, "uuid": "3e8e0c33-3cb4-428d-97fa-615ce8b3f8ee", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918155, "uuid": "eb9d4a75-64a8-48a0-930e-5ac9b04e6152", "value": "24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8ayjF:+TvC/MTQYxsWR7ayj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740918155, "uuid": "174dc7f9-b145-48b7-97a3-78e67716beb9", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918155, "uuid": "2e13aeeb-173e-4672-85e5-e6da829bd212", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23f58da2-f761-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740918205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918205, "uuid": "312fdbee-4bc0-4b08-a187-d37c75a0f482", "comment": "Malware payload (Mirai)", "value": "580d583077c086db21fb0f304e6468b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918205, "uuid": "a9679ea5-0072-4674-ac62-77494955700a", "comment": "Malware payload (Mirai)", "value": "f85ec118146d2d439f0e7b767ee50d8b19e75b66581862585f98e19732b99778", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918205, "uuid": "f152a354-a786-4a6d-b9a0-d6031e5a0212", "value": "T1FD535C02730C0A43C1A31A70263F5BE1D7FEE6D022E4FA85652E9B969671E371586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918205, "uuid": "d9d3097a-56ba-419b-bfce-599ab210e0aa", "value": "1536:8eeCFVTYCqWMr4/48Mov2No+GgJInj/TyQAMe:8ee4YCqWy4Y1NTJIj/PAMe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740918205, "uuid": "68decbec-dc68-47d7-8118-d471c48c3b44", "value": 65324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918205, "uuid": "e5483f75-bfe3-430c-93f2-79f0f4eac6a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740918280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918280, "uuid": "5c82faa6-972c-4d6d-90a4-4606070f92b2", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918280, "uuid": "92d3a7fd-6d6d-42b6-bb01-3f0584668f51", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918280, "uuid": "89600c2f-4fcb-4734-926b-9de5d82aef05", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918280, "uuid": "5a7b629e-43bc-4bf3-bc40-c24f6f33f9d6", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740918280, "uuid": "88d52933-f184-444e-a1b1-b81e312605e4", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0465de4e-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740919011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919011, "uuid": "54b146a7-6819-4641-b6b1-8b732f44cc04", "comment": "Malware payload (Mirai)", "value": "2902440afc5a8a515f4ebc38542c874e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919011, "uuid": "b8d94fa0-caed-435d-aa8f-0e7d4b5282fb", "comment": "Malware payload (Mirai)", "value": "218137a503a1a5384a5e557496516b98236a6a30f47ad4795bfd8979fcc10f0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919011, "uuid": "0c779431-9676-45c2-87a0-1274e4587e1c", "value": "T19093A71E6E119FBDF65D823447B78F25969833D627E0D645E26CD6002FA034E281FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919011, "uuid": "a5f30b9f-7327-4c52-b673-f840475511e3", "value": "768:txfd7v7Jq5I/iVZ5zTesSUmEJBnOm6T8AlQ2PZvecRi2wPicRuHUkTJlXryEDleU:l7Jgt9ODecRiVi8dml1e+RCAU6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740919011, "uuid": "50466dde-c141-43a3-95dd-c50ff84d9bf4", "value": 88956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919011, "uuid": "900ecacc-f645-4245-90f9-fc07c2c6446f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50ea7e65-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740919140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919140, "uuid": "8f167e8f-8e60-4c4a-bcc1-af027b43e562", "comment": "Malware payload", "value": "7e30308ecf4e5106453ba31432f2eb2a", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919140, "uuid": "933b490d-e606-45d1-823e-c98fdb0893de", "comment": "Malware payload", "value": "d0cf319bb9d631a181115033a53acb401d9ee2a7df3024fdf23139687e477c26", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919140, "uuid": "533dbe44-f439-48c6-a971-9b3673962ce9", "value": "T17A3493F0B181E8C3FC2C877EF3986A258B61311BB2E505463564E15D9DE6B12EA0ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919140, "uuid": "00b10fd9-7b6e-4ec2-a723-57926104afc7", "value": "1536:78wQ91zkrmC2aXXkNaAj49fjnOTv9k1nwtCE0g4oh+HvRgXXkNaAj49fjnOTv9kM:78wM8mC2Yrv3oQ4rvlo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740919140, "uuid": "380ece24-211b-4813-8d79-ea9cf4ceb2b0", "value": 252928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919140, "uuid": "6d969e8e-5f8d-4172-8720-878597a8f9e2", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a901b318-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740919288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919288, "uuid": "f58eb8d6-f610-44ff-9095-96c1e39aa3c9", "comment": "Malware payload (Mirai)", "value": "fc85400be93854ebb875965b9d5f9926", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919288, "uuid": "b4946016-8855-46a8-9b38-8e5572f98e56", "comment": "Malware payload (Mirai)", "value": "b80cbb1acceaf172073d0015d4662ab924a344215d56c397754182be8bfc0cc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919288, "uuid": "163ef635-8d4c-4804-b07b-05b9718121f5", "value": "T19A635C31BA760E1BC0D1A47A21F74B65F2F147DA25A8C61B3DB20E5EBF61A403513A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919288, "uuid": "40541ce5-b771-4657-b26c-b7b55128589c", "value": "1536:bQrzGruDqW3SAXr03PpJPW8i6/HXtTjSlk5bytkn0P:U1jovwOXZWlUb3n0P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740919288, "uuid": "0f0c954c-a4a8-4a6c-b4ee-382677fcdd77", "value": 70688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919288, "uuid": "7aa0bf30-a4af-4390-869c-6f62fa18d3d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d84a6869-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740919367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919367, "uuid": "d8007ef8-5f83-474a-874b-256d914e58c5", "comment": "Malware payload (Mirai)", "value": "0410e83a1367f60b8d3262a6df8a138f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919367, "uuid": "6c2e6879-15c8-4caf-b72f-7aa25003436d", "comment": "Malware payload (Mirai)", "value": "c14a136746553afdfd4b84ef6316c5f64a570b8219ea41c36f23e5627455f1a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919367, "uuid": "6df24daf-53c9-4ab6-a62a-349e8a8b736e", "value": "T113632A17F84180FDC09AC1744B6BF93AAD3372FD0238F2A66BD4EA22AD95D215E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919367, "uuid": "7ae7a523-7440-4c42-a819-dcd88dd1bfca", "value": "1536:eqg9jfA6YHDJmql4D9BfJOJdgigB1LfeQc8ZqhJkePWL6F:V+jY6YHDIA6rfJO/ifLfo8ZAkePWuF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740919367, "uuid": "e7ee4aae-b794-4128-80da-5e6264060a9b", "value": 67808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919367, "uuid": "419ffa27-efa8-44e5-94f0-e072a7e55281", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0142369e-f767-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740920724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920724, "uuid": "db56b927-ef23-4900-a4de-342f9dd53b37", "comment": "Malware payload", "value": "f5feb4d035b60da9b8f60248c5e39aaa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920724, "uuid": "7c6ed606-b50e-4e5d-a93c-18d473cba79f", "comment": "Malware payload", "value": "9fae8bab0de16fd66f7817ff170dd164470cbf4f2aa74c96789a718e0068994d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920724, "uuid": "77fd5496-3901-43d9-8cad-9870c6741b1f", "value": "T1AFE54B92E58971CBD7DA16F84537CCC1792D03BC47124DC39C2E66BA6EA3CC816B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920724, "uuid": "efcf7da2-9443-4e58-ac74-c9a72ce89ef6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920724, "uuid": "b76398c8-ab18-4c31-87d1-1f25b285b650", "value": "49152:y7n1JmfReO2dfiw/hfQH4JNO0VpJxO5JChb9jP:yT1JmfcO2dfiwZfQH4W0VpJxZhZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740920724, "uuid": "0552fb1a-d877-43ab-a195-13c239bdc252", "value": 3188224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920724, "uuid": "9aadc61a-9fa0-476c-b596-96d3f57e8507", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5873ba67-e99b-11ef-8aba-82aee05be84a", "comment": "Malware payload", "timestamp": 1740920765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "835c81d9-c7ab-402a-b5d4-2b7951a7c343", "comment": "Malware payload", "value": "3886b24c668aa090678173fbd4b6af0f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "7e287536-c8d0-4e6a-b99c-7f91e652ea9d", "comment": "Malware payload", "value": "014b30b9d4a550dbbe45032e47104cb827a0aa3582897058884aa38ebfc41812", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "ba963683-2c1c-4235-bdee-e93d4bce4614", "value": "T168362997B8924982C8E4367ABC7E81C473635EB99B9752576D04FE3C3BBE1990E347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "c1c6ae2d-c97c-44cd-82be-375d713d201a", "value": "24576:F7FdM15FI+EsTLoF6EL/49tm77khuVryS3XOUPBkKgGethmaCOf87r7gAhazyhqn:F6522RdTlv3yw0z8Wm/gazYD+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740920765, "uuid": "96add6bb-9405-4238-b1b6-5e4737e0e8b7", "value": 5177344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "bad49110-510c-42c5-8697-9138ec4c02bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "306326f0-e98d-11ef-8aba-82aee05be84a", "comment": "Malware payload", "timestamp": 1740920765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "126378ed-f94a-49b5-b87f-bb00cf1c745a", "comment": "Malware payload", "value": "4a9114632591c83a9348987722740776", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "cfdb6209-9910-4ac1-a3b7-cbc552d437e7", "comment": "Malware payload", "value": "520689cd3c64637b7bec4a05d91b052cd9fbffa4ff211c172842a0581940845c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "4b3c0d9b-d943-47ac-81e0-b3dbd793b973", "value": "T11A362997B8924982C4E4367ABC7E81C473635EB99B9752576D04FE3C3BBE1A90E347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "9652fe2a-2dcd-4aa1-938d-7b3a79305041", "value": "24576:dO+nPUOHyGs/hVSYOzn/nuZyEy8DWO2FFWMCYTREkZHpjOlAA6518zm9A717GzS4:dj3Owhv6WSPo7ctxqqaL/ua4Um3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740920765, "uuid": "97bc6d7b-a1c0-48e6-ba0b-eccc131bc8a9", "value": 5177344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "165c9792-52e6-4197-9456-9ce764e6a246", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21608650-e993-11ef-8aba-82aee05be84a", "comment": "Malware payload", "timestamp": 1740920765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "867e72a5-7291-4c7e-885e-5969dd055499", "comment": "Malware payload", "value": "b20214e30ab0695094d06219d9137af5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "5b686f78-3d91-4c8e-a42e-2e0d6d5d51f0", "comment": "Malware payload", "value": "1f755cf4af1924f24bb1c81272fdcdc5dac37edb740dcd7e979f1d717d791154", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hfs", "colour": "#2b0d7e", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "b29a3ac2-b2c9-448f-bb13-32ac728f1c15", "value": "T158361897B8C24A82C4E4367AB87D81C473635EB99B9756576D04FE3C3BBE1A90E347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "3bffcf3e-382c-4e7d-8c28-c38f59c9e393", "value": "24576:yd7bb70/cInRinno6XvwtOUJUstDMPIp/uHsyHO3XO+Yt2wYggg4jDGgHVNO+L/i:yvMfRJ2Ci+Qq9rM9JlG/raLim", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740920765, "uuid": "2056f5fb-4ba3-4ca5-a638-2f685a00da02", "value": 5177344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920765, "uuid": "7f8aefa1-b93b-46d5-9479-3047e0aea682", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d414a31a-f769-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740921937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921937, "uuid": "f82b439a-a4cf-46d0-9431-690dae104ef0", "comment": "Malware payload", "value": "7851d5538dd1c3fe5e2f1e958692f372", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921937, "uuid": "1e245ed5-bc9e-4fa1-942e-f03ee190982c", "comment": "Malware payload", "value": "b671643636e6a63b99b5f538ea953090d30cea5167c5832bc3a2f3b0c47602a7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921937, "uuid": "c1567bc4-41e4-4e21-9a50-438b386c8d7c", "value": "T13106339E2F73A373CA515831F75D01DDAA997C0F937BC3588B90A491ABB9F1E48263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921937, "uuid": "215ad0f9-f0c2-4361-9434-0d286653ffbf", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921937, "uuid": "50dd5593-4a3b-49ae-a21d-5b50433919bd", "value": "98304:3PrTH2nwK59I04uekTrALp4DZJkVY2f066sc:frTswKXyLk3AYH2Y2f066", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740921937, "uuid": "8447e7db-5451-44a3-a6ed-74578da0ecd8", "value": 3950592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921937, "uuid": "ec9f2b99-b619-4356-978f-beceb3429ac5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740921940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921940, "uuid": "6f7694a0-a9eb-4cb6-bdad-06171b47e540", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921940, "uuid": "5ad211ca-2a1a-4479-aaf2-3624e7db89a9", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921940, "uuid": "9114f9e9-ecc7-4888-af19-f24668703887", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921940, "uuid": "2ca426fa-00b1-4603-9314-d19b08eab89d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740921940, "uuid": "cd0daeb9-bb44-4d26-8477-0350643fe81e", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faf27c33-f769-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922002, "uuid": "a76d2d89-f0a7-47b3-ac0f-fa69be4d6d37", "comment": "Malware payload", "value": "191c74dde5181a6227200c90f3666790", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922002, "uuid": "d59fc20b-2305-4f70-bc1c-fb4ec26dce72", "comment": "Malware payload", "value": "35e035841816936badbb9f655d7a857ae1bbb979d7022e4e1af269b7a0736e69", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922002, "uuid": "496dab19-1dc6-4c79-9ce9-a157de830cfb", "value": "T116159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922002, "uuid": "d86fd620-54aa-410b-8a46-477e5f67c7fc", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922002, "uuid": "4c9dfccc-b90f-4df5-b816-6b8c07c0f373", "value": "24576:WqDEvCTbMWu7rQYlBQcBiT6rprG8a2cF:WTvC/MTQYxsWR7a2c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922002, "uuid": "85053d6c-2645-4b95-944b-2577370c2330", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922002, "uuid": "1be57d35-a57f-4533-a84b-13b22f9383e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cd257c0-f76a-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740922032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922032, "uuid": "a2c2842f-494a-45f7-be21-57c020b54043", "comment": "Malware payload (Mirai)", "value": "458e5822472bff73d37fa14028c8e499", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922032, "uuid": "cef28b97-49c8-4df7-a88c-2ce1f4859916", "comment": "Malware payload (Mirai)", "value": "090685d700c4f990e0e4049eb0ab602b386e10313799468ba8450748e9b364fb", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922032, "uuid": "2e03b63a-8b2f-40d0-a34b-74dc24949f63", "value": "T153733846BC41AA13C6C5127BFF5E438D772623A8E3EE3203DD259F21378B55B0A6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922032, "uuid": "3403f2cf-c63b-4dab-9b1d-b93891ebd619", "value": "1536:UH0NlEBrO/PLfbSJHmuEAvdtUsR/K+5q5gAcZ7jrX7:+0NKBrsPCpmuEWdtxX5qWvX7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922032, "uuid": "84ae3089-f335-49ad-8fdc-4829ecc4e97f", "value": 76952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922032, "uuid": "041afac8-a1a4-403d-a558-9986e08a05da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5124e16-ed50-11ef-b199-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "5fdf5fed-ad36-4946-8520-8584ba68a246", "comment": "Malware payload", "value": "401fc7901ef8ff89309b69766fb38ccb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "6003808c-aaaa-4b1a-b5a6-c164cf748ab9", "comment": "Malware payload", "value": "12b096048be2cca3f61e8fe031efa942faf8f4c31cbafe76953b744537275ace", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "069b2f27-d0ae-4002-a90b-edf15f9e13da", "value": "T15974231B589C05F0EE3D0FBF2BE84AAF1820591CB9ADD763F218ACC69045E6CE1153", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "9339340b-6916-4155-a52b-c72ee96e2fa9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "41c18da1-49ad-4f5d-aa27-18c1f9ec1e82", "value": "6144:IbuOXoQYLNnZXCHh+qF8tkT3CjqmeY0bE9ZPRrCcaoG0jQl:ICOYvLqoBEbsrCckp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922505, "uuid": "61ae6c42-7a3e-414b-b74c-a9c5098596aa", "value": 353280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "cd3cf0cb-ac61-449c-9bd4-bf08cedd501a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26c8e75f-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "39036d19-ac68-4269-a173-9eabc6d917d6", "comment": "Malware payload", "value": "96273cfc6d38fee66574890a419736eb", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "bcd6e096-ca4d-4b15-8943-486ed00bbcd4", "comment": "Malware payload", "value": "ca81f4c3d81fcdee19902e211aaa21bd32d95e25081215b4969f30222b6f17e7", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "29b09958-cdcc-4500-aaab-5d98b1f7fa6e", "value": "T1A2B3A512B8D06095D9EDCE26A2DEED788572DD704993F946B8B0FC582C2E1C1FF264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "becca7df-3c25-410d-8c55-8ba2a03cc5b4", "value": "1536:ZaSZROPtNq57BcJcwzfxFKGoiRUxlioZ522x0cERsPANZ:AIgO5l8ccfx4iis2+sYNZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922505, "uuid": "56c0da52-838c-489a-b1b8-fdf60f66c769", "value": 116189, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "e7500dc5-dd84-4574-997b-fcafa1f7be2b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1147a846-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "f42019e0-0845-4645-8c55-0819a795fd7d", "comment": "Malware payload", "value": "550686c0ee48c386dfcb40199bd076ac", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "0ef6e3e2-cc41-4c30-b3db-98cfb83ad4a4", "comment": "Malware payload", "value": "edd043f2005dbd5902fc421eabb9472a7266950c5cbaca34e2d590b17d12f5fa", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "adca46f4-754e-42cb-80fc-586eec5166dd", "value": "T1CAE47D26E352B427E48314B5D60D67B74C301F35476198EBEBC17E68AB716D2A238F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "1e184ded-118e-47ce-a830-2e0aa162d1a2", "value": "f781fa19ee3108d3fcdb3967b70bbdf5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "8fc19858-9626-4d0e-bd7a-e7a488830ef1", "value": "12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922505, "uuid": "57eac917-aff9-4391-a602-07fec824766f", "value": 685392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "3d6b6f24-8807-4a59-8c9c-35be32385235", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe78f8c-e2bd-11ef-9990-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1740922505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "478e6a06-64a7-4587-95a0-11b6d8485fa3", "comment": "Malware payload (AsyncRAT)", "value": "b5815ea98145174cbd6ba560df98dbf0", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "cac24c9f-ece3-447a-a788-1218b93a7ff2", "comment": "Malware payload (AsyncRAT)", "value": "be845ad7a6cb80f192f5e9eddca83a4d6a7977b7f05d925d9569b5cf1e82cd77", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "60404b6b-253d-4420-ace3-febd3c5adf5c", "value": "T19A533BF752135D8F46370E09E40C1311EC9D99E7B3D9D1EDBF898DB18A994688CA0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "f56ec05d-60dd-4064-875e-9c5834d542f9", "value": "1536:JTjWGV9L86PGunNW3VwABjoICr9pzRlH35MM19WTXPZQKlN:/D3NW3ljovzb35/19W7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922505, "uuid": "961546f2-d1d9-4228-872f-9e53f468dd98", "value": 64856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "6456aa00-087c-405a-aee0-fd248fbd9117", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18aa05e7-2316-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "4513cd06-b142-4aab-a59d-7518ab654366", "comment": "Malware payload", "value": "24885101eb6f02c422588f3f95875b46", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "5282534e-29ed-46d5-8e7c-68698f5a5ef0", "comment": "Malware payload", "value": "e9765e2ba66af652030f05c535a29ed19a8e17c555d331703f6201f7215ce1c4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "3f055886-ad70-48af-8d45-b8a0cfeb089a", "value": "T1124321088B7549DB016C16E851362E10ABA240D8CBFD8DAA1D7F736F58A43DDF274B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "7f865c14-ad16-4520-af3c-c4e407c9669b", "value": "384:Yoamcc6K8tTII00kKMzGS5o2fVD9WkyYUUVpuP0SSrQ5MzHXX:Omcc6HtNMiSbfx9WkMUVpuPmrysHXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922505, "uuid": "2697f761-1eed-41c1-924b-68204fca9ab4", "value": 57008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922505, "uuid": "7ce062b1-e756-4650-b66a-2c7ead26dc64", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b0283-604c-11ed-a083-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1740922506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922506, "uuid": "d30a9985-8c57-403e-be5d-b0e4190d8e82", "comment": "Malware payload", "value": "1f44d4d3087c2b202cf9c90ee9d04b0f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922506, "uuid": "5dd341b5-7fed-416b-b6d4-457f9803bf52", "comment": "Malware payload", "value": "4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "381125e5-a3b5-4c1e-b9c8-206057827bc8", "value": "T1FF356D4AEA07AC7BDC5302754617E39B0575DA70A833CB8BEAC81D68DEB3DE116097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "4c7bb149-6e7a-4b2c-ac30-dcb72562d080", "value": "e727d00364cd87d72f56e7ba919d1d40", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "ac854fef-42d8-40fe-a092-06fea2f212a1", "value": "12288:dxylSMUMifofI9ayCvcZMBiMjCodEMdo8R66tCWko5+jsbFcoYuprzpGSgGSrz:d4AMB3caSZMijBI1CWkoj5auF5gGSrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922506, "uuid": "057f6662-3d8f-408f-8a29-b92adde2ac12", "value": 1106998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "72b9af3c-8511-4968-83ff-44cc7b6b04c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65b4c7fc-9469-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922506, "uuid": "4783b199-63ee-4728-8d51-d0367bd54407", "comment": "Malware payload", "value": "ffe267eafd26b9bf8d76f37b4784ea2b", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922506, "uuid": "5b8c5b2f-d152-4ecf-b679-5c0b78f48b4e", "comment": "Malware payload", "value": "dec10cfa6b24a534b768d5412fb6a8c50b76e0ed807e13e95de07d8ddc682d45", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "3fe215d2-e280-4a1a-b8a0-af455eec31e2", "value": "T1664460E1DBE9351E1315FC7AC1EF085A02413E4816BB46A013B9DBC93799F48E73AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "363fda17-8908-4ede-8013-d2a499f1fda4", "value": "1536:m/ZpgY+t5jUeWbrl9YhsOFECObaLaHelhLGllq+yeVV1:mxpgY+vjUeWbx9YbYaLa+bglqKVV1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922506, "uuid": "f2e41afb-a582-4e93-8d91-ae23c159c7db", "value": 270652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922506, "uuid": "f3951819-3d61-4e0f-a43e-c7b8e4e5f860", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68d9a9cd-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740922616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922616, "uuid": "3caa1f1c-089d-4e7f-872a-b08c847e4c1f", "comment": "Malware payload", "value": "61adb7dab1d714ffe7be4cb94cd645e6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922616, "uuid": "877d33ac-d2e9-417a-a0db-c3990ef0071b", "comment": "Malware payload", "value": "65e19b12e9b202e29447b4e957e04910f0f6a49025967882ec011df98e93ac2e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922616, "uuid": "b683643e-088f-4a72-afa8-8259dde8bd1b", "value": "T1BD8533A2CD22A6DED15B0137D8BF436CBC9E11ABF89CCD7A5A0BD727488F07611708", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922616, "uuid": "1a28cc78-614a-4e36-8528-4f427556e61d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922616, "uuid": "548d0b87-22e5-4999-ab8c-d705fbcbefe4", "value": "49152:82JUzn+eIIiTMUH07y2sLsQH1gYLskEQt6pDEwe:bg+eRiTBUubFVgMskQad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740922616, "uuid": "badc4326-8f80-447e-bc35-0c64b1434fe5", "value": 1869312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740922616, "uuid": "2904197d-911e-474f-94b7-cff9f8d5644a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740923114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923114, "uuid": "cc9a98c4-72c3-4d49-ac9f-f20323c163f6", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923114, "uuid": "1db5ec4d-06bf-473a-937a-e43c646a1408", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923114, "uuid": "c90f3f04-54e2-4f66-a7b8-a57fa35b3060", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923114, "uuid": "b90bf968-f69f-445c-9ac6-dfa4183bbf83", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740923114, "uuid": "f2c4a755-6865-4313-a1c5-1323404c974b", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62410eb3-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1740923464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923464, "uuid": "3b56dd2c-f089-4ae8-921d-8bebeb998c30", "comment": "Malware payload (Amadey)", "value": "d5ff455b2914702cfe1356d66f88d894", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923464, "uuid": "f21d03f0-280c-46c1-a2a0-9d4533377983", "comment": "Malware payload (Amadey)", "value": "adf738acc01695b113c762690d517251c9217bd819c8c6218ab3cf33dea3ebb6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923464, "uuid": "964f970d-006e-4097-bb1a-a2dba8f1dac0", "value": "T1D3C32A213496C031DA5D56BE18A8ABF487BD6910DFB00DD77B840D7B9E242C2EE34D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923464, "uuid": "094ff523-7d43-4d6b-a880-55ce49bf105b", "value": "fdb088ba51afbf555d7a0f495212d8f1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923464, "uuid": "d04aa2ba-be07-46c8-ad22-6852b7ca6e23", "value": "3072:KW+Z2dUyZB+nG7CImlE1P/Y4Z3SNq5IUvnMfYYOp:yod9QYCIOE1/Z3Rf4Ynp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740923464, "uuid": "71db2f80-6834-4400-a9e4-1aacda4a9d80", "value": 126976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923464, "uuid": "337d4d24-07e3-4188-a984-8ca3377e02e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62b462f4-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1740923465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923465, "uuid": "6f4d9c05-bfa4-4460-bc48-17e4ee609372", "comment": "Malware payload (Amadey)", "value": "42139978003da9b45b1f569f3e7d5fbc", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923465, "uuid": "510e100a-6805-4e27-9eff-e0c540f4d404", "comment": "Malware payload (Amadey)", "value": "888ae7e173ddfe0cb9436ea6f4d97fb18c938821865400cc8bcbe53a8df7a54f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923465, "uuid": "1189cd72-25df-451d-80f5-3924ff44f9c8", "value": "T1F9557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A62F13FF1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923465, "uuid": "5ebb274b-4eea-4fdb-8a43-b0f271e25627", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923465, "uuid": "82dc6087-d5ad-43c5-beb9-8e5279b878de", "value": "24576:aDR0Nf/n0PE3tCksn6JCj2/NMkp8iP5tMjw+mhQYuc5:a8EPGtCkhq2WiP5tuw+iZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740923465, "uuid": "c8dea207-c8cb-4e05-9a12-f4432d08e799", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923465, "uuid": "060fbf0a-07ea-48ae-942f-bc080d230842", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66917a68-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1740923471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923471, "uuid": "d4799e73-aace-4df6-9bbc-ed07dbe2354c", "comment": "Malware payload (Amadey)", "value": "fc52003eaa47548631ca1626dcb0ccdd", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923471, "uuid": "a9b8b4d8-0605-4185-ab63-8c1496097ab1", "comment": "Malware payload (Amadey)", "value": "7903ec9b85af53925ad71d67040d7eff54e30c998c958f99745a9c5068b91101", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923471, "uuid": "3e63012e-b7c8-43af-8570-a65a08976d20", "value": "T107358D06FA52D0B1D8D420B112B6BBF2597C6539A72445DBABC01FB69D201F33E36B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923471, "uuid": "4f89d44d-5938-4d97-a88f-b2772ec75944", "value": "aca6f08ee5befa37be16bac4bc315573", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923471, "uuid": "be3102bf-acc4-4046-a345-9b03cd6e4b1e", "value": "24576:cf5xDRatdGrtrQHB8/cWmGwDMlH2UaX1AIENFoeesKPnXzlnB4BtD:cf5xVa0GHbGdeD/zJotD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740923471, "uuid": "3bb95956-b07c-45ea-82da-7c313ec2e67f", "value": 1087488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923471, "uuid": "8715d8f1-1c8e-4940-9cbd-f21c984b120d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3ce4f2-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740923586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923586, "uuid": "06406cc5-2964-4959-85e2-14c819b01e95", "comment": "Malware payload", "value": "6c48d9eb6836d39b65e8a914e12373a0", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923586, "uuid": "8197edeb-236d-4746-9536-84b14879a14a", "comment": "Malware payload", "value": "04dadc2144406ea3a594ac3758c6625e606e4fd9c61bf33c4669739fd75d38c1", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923586, "uuid": "4c1658c7-4301-43fe-a17c-4bcf1253f942", "value": "T165D5D90E5769A21ED5304235F9C9472B3375EC8C5A86974B44D9B0302CB22F9BED86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923586, "uuid": "148b82ea-a882-4d00-9686-bccffe89b0b2", "value": "24576:Vg+KhTkK9nsZD9xfJ+wMSZ6Zk8RoSHIZDKok7o:hyTRsZD9xfJ+wMSZ6Zk8RoSHIZDKok7o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740923586, "uuid": "585b4a22-77a2-4e6d-8679-5ab8fe7ce1ee", "value": 2831169, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923586, "uuid": "4d161dfd-cf6e-4d09-839a-f10477a59d4e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2acca55b-f76e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1740923800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923800, "uuid": "d22a9e22-d5af-4ba2-a497-e5c9ff527de4", "comment": "Malware payload (Stealc)", "value": "d714e42f7a34114d1c953274fa37e0fe", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923800, "uuid": "46410f48-279d-4451-a810-40ccc3f80c49", "comment": "Malware payload (Stealc)", "value": "2844456207a190b552da0df64f135b14bca98b25a507baf49e1f48452cc177cd", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923800, "uuid": "3c92050c-37e7-4b07-b106-7dfa3635de47", "value": "T11C85333A012FE475E1DF8872A885AFE0EB36B6960B909E3083F69D6D55425D7E4C04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923800, "uuid": "b1edc177-97bd-4440-8e12-44dd841b7bfd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923800, "uuid": "ed6be09a-5d24-4ed8-88ce-b2b43a98cea9", "value": "49152:Z5Q3xfj+mehXjrSEALgaAdrcTvbaG7HM:ZCJehXjeEAcfKvb7H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740923800, "uuid": "c006281a-1fb0-4e54-9df5-e4e5961b1402", "value": 1808384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923800, "uuid": "f0e582c8-3b3b-4e11-8fb3-eef205d76876", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a69dd8ea-f76e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1740924008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740924008, "uuid": "44110832-bea0-4f7b-9720-379e436167bd", "comment": "Malware payload (Healer)", "value": "801ad79d09c10fffde32510d41c2a3f4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740924008, "uuid": "4e97e284-3fb2-4869-a4dc-7a117fa4ac7b", "comment": "Malware payload (Healer)", "value": "9b426b8914da7acdd5aced9e14e83e1f7c5aacdd364549c0039df94795321781", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740924008, "uuid": "4d63e2c7-b670-4ee8-955a-c5cf0f838a57", "value": "T11B85339F5FB45067CA08EEFD1D4943A7DFA42CC29805581B1A8A22E33B5B34570EDE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740924008, "uuid": "c5011181-0ae0-4b28-aaf3-c68d41442ad2", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740924008, "uuid": "4ea7029f-9da0-461d-8637-1eb198dfb99c", "value": "24576:T/1ZFhpUUTb8REZ6q8Q/zP1BltPR/gLzmHrUezppIIKtzY+avUkFzU/41Vxwn6dN:T/zb8R6l/z9BjPRnoJY+av9ZU4u6dq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740924008, "uuid": "3187a818-2e2d-487f-9187-8d14e012b4a0", "value": 1744384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740924008, "uuid": "3591088c-b758-43ca-8510-05a2d0ca221a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7625fff6-f771-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740925215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925215, "uuid": "fa6e12a7-cfd8-402e-92a3-807f2364a419", "comment": "Malware payload", "value": "2aaeb1a3d9f03992c2b2b3a535dee609", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925215, "uuid": "3630ae60-f7c2-46d1-8d5b-b184dd532568", "comment": "Malware payload", "value": "12305f84615a90cc23fbc6c8a8e87c6fd868fcf4f873e9a0e9e20e8d558878ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925215, "uuid": "ee21476e-26b4-4ac7-ac38-3f35995a2228", "value": "T1D126330BA4F70179EA5934B2F36E4BE5B8427C8F14B24ADC7F81E8E111E27933595B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925215, "uuid": "3089f3d0-5d65-4dd9-a8ed-9b91f157dc29", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925215, "uuid": "5145e0fe-678c-4495-9e98-43a6ad022c94", "value": "98304:hkgLwEpPSMCRfjw5brmldI163SEdHCU8Mg6iOG8:hkg7SMCBjKAI63SEAU8MiOt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740925215, "uuid": "8c1f5823-7eb7-46a4-b04f-4f7bb1251bff", "value": 4705280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925215, "uuid": "93c16be7-769a-4382-b217-4abb3a246ffa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31837a6d-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740925506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925506, "uuid": "199bf625-df16-4861-a7f6-196d4eaa45f2", "comment": "Malware payload", "value": "3f5dcd8393309bf21b61692985426f80", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925506, "uuid": "9bc4cb1f-5c56-4b7c-b9fa-bcaeaf66b4a2", "comment": "Malware payload", "value": "e003fb7ada6a3a943867653214c2cc5f3f894294b4c8476e56fd63bf8e61898c", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925506, "uuid": "d25a1f70-4ec8-4b2b-bf42-104386ade175", "value": "8264028BFF367C1BCB001BF225DB4F9DA96C665B82C7E0A1B6C0444F26E51C676912C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925506, "uuid": "cd765e59-0f01-4cfa-9f5b-94140bd712c5", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio:p3lOYoaja8xzx/0wsxzSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740925506, "uuid": "67c64128-bb25-4cfb-ad04-b5d5d1186c77", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44edce42-f773-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740925992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925992, "uuid": "19649161-b1b6-4884-b5af-26ab442024a5", "comment": "Malware payload (Mirai)", "value": "aa05a76ec031acfc105062285c2b1cf6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925992, "uuid": "964ed5b4-ddca-4cae-8520-fc7c6be0c225", "comment": "Malware payload (Mirai)", "value": "5fbb5991c6fff458c2f3d030932b520118a61e30c3a66f8014ca3088df72bea2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925992, "uuid": "d6fef5bc-55b6-4c49-b242-a50358372b1d", "value": "T16DA35C02771C0547E2EB2DF02B3F57E593EEA99121E0A948294EEB4A9271F325185F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925992, "uuid": "e1706a5a-655e-4ef1-a241-172bccdfbe84", "value": "3072:mmhGsArA47qjnPQ0B4Fcgt5tnjZHnwpGh:mxrqjQ0SFcgPtntjh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740925992, "uuid": "560cdb77-dc52-4cd3-a9b5-f85cadda53fa", "value": 104264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925992, "uuid": "e602e78f-4cce-4f35-95e0-0542adfbbe6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4051fb-f774-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740926598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926598, "uuid": "0e7010cb-67e7-42de-ade7-c076d69cacd3", "comment": "Malware payload", "value": "27a2b49582305cba865aa3df6fb1d1cb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926598, "uuid": "b8956d9b-897a-4caf-933c-1ecdc45c4791", "comment": "Malware payload", "value": "83fc66ef3b1f81e9eb9fedf13781face99f2aaf0359798bfa5dcc39965493dfd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926598, "uuid": "a71d459f-a806-4c96-9f29-c83903697625", "value": "T14556335462A00EE6FAF7903DD8A4C815D673B4270711E49B82E4462A7F276F0EE39F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926598, "uuid": "72a1c963-9394-435b-942e-c1eee1c93c47", "value": "456e8615ad4320c9f54e50319a19df9c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926598, "uuid": "f5ae27db-2779-4a80-b01e-acf4394738af", "value": "98304:gjKq2B/JWHioVQWJuhswoYv5eO0zo0Ahd6y0Naxxv8fqDDAx06btVUJFaeV8+qdE:gg0HiouWJysVYvsOaoyMxxvjDDAx0al+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740926598, "uuid": "de6424cc-fe21-4ecb-8f60-7a4bd22a84bf", "value": 5915949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926598, "uuid": "9cd871e7-a3d4-423b-b248-be8b6a131227", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "973cc148-f775-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740926989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926989, "uuid": "52559b3c-764c-4099-b5d0-1a5466824de2", "comment": "Malware payload", "value": "b5c34be807e1801babe477674a891dd7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926989, "uuid": "a574f0d3-d1e4-45df-a129-73293c771bd8", "comment": "Malware payload", "value": "809b1a96a5f3e9083ba0240bc96516ca90e7d2cd3124d811f0f30d6cee523d85", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926989, "uuid": "2b0271c9-3db9-45b3-a93a-5113b7ba7db3", "value": "T170048C2135C0C0B2D1B3027149B8AB629ABDFD714BB2165F27D85EDE1F745D0AB293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926989, "uuid": "b025537f-ed6c-47ac-8e8f-d5482415d3f6", "value": "b9d5e6231a729f64685d981b20518bd0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926989, "uuid": "3eeb1c79-1482-4b1e-8713-7862cc9ffefb", "value": "3072:aGO4uWRgu9bELjrW2a/lXlvMZ4Iu8oq+zKy+wYlhqTgyZ:7XuMgm4Lm22lXFMZ5E+wB8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740926989, "uuid": "ede23230-c60b-4369-bac1-faaaa94140cb", "value": 179200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926989, "uuid": "2b76a2f6-867f-4d99-9d3f-9728609c0fd0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb362c7f-f775-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740927049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927049, "uuid": "e8b01e55-f8c3-4c77-ba12-afb24edf8ab7", "comment": "Malware payload", "value": "6f459b0ed8823910cb66f7f34babda8c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927049, "uuid": "70a5fbbe-d233-4817-8514-f23b1f80490d", "comment": "Malware payload", "value": "7745299401a69500f52e7fcce6e7c4e6037455f89dbebae1802d983c1bd326f6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927049, "uuid": "b3a04edb-3f99-415e-8894-209adef408c2", "value": "T16D458E46B2B501F8D46BC178CA46964BE7B278461334A7DF56D0875A2F23FE12B3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927049, "uuid": "ff8f0166-1a25-4982-9815-33c429fe4e8e", "value": "4b08efbed763524964334e9746c7ffd2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927049, "uuid": "bc4efbac-d318-4cbd-bdd3-88cef9ba2c17", "value": "24576:ftOtoXxa+VQlUxX0YulFoPcIZE+r1ipfms:lOtoxKlU8FoP8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740927049, "uuid": "7fc658cc-5be0-4e47-8f4e-04e6338d77e4", "value": 1217536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927049, "uuid": "d9f33985-b791-4791-bded-56e555f722c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1866bf5c-f777-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740927635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927635, "uuid": "c91c0486-55b6-4e1c-8c42-74998933da93", "comment": "Malware payload", "value": "c52b28b12bbca4a07542520946c40e7a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927635, "uuid": "3e2dfe70-dac0-4de1-b1a8-8a48d8f69904", "comment": "Malware payload", "value": "2e835da7d54f1b04498cf277f8e12c6d1dc509ff6d011f364e5f8888185b71b0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927635, "uuid": "5c43720b-e4d8-43e3-99f7-b5088955208d", "value": "T16B159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927635, "uuid": "2c0e063f-2346-4de0-8905-a5ed3bde0f80", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927635, "uuid": "91cda71a-1ee9-4e72-a14e-27f065c3d11b", "value": "24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8ayQF:dTvC/MTQYxsWR7ayQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740927635, "uuid": "c7fc2bf5-1e2d-404d-a936-8e43bc0c4db6", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927635, "uuid": "c48195ae-6470-4775-a4da-d0482a757c89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ffcbdc5-f777-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740927648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927648, "uuid": "5e9a1c61-239e-432d-ae09-b71c3884f0c1", "comment": "Malware payload (Mirai)", "value": "c9d025018946767f385a8018549f5499", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927648, "uuid": "2d8db4ff-0610-43bb-8a58-06fa1a4e9706", "comment": "Malware payload (Mirai)", "value": "fb18cbb2020c4e1618d5e1d3016a0d901821536390e9424a70e152039525b8c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927648, "uuid": "208a88b0-0c0b-4ba2-ac23-70dfb5cdccb7", "value": "T190B35CDAF801DFBEF81EE7BB40230509B131A3A156520B367257BD63EC761A90563F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927648, "uuid": "ab687f89-3a07-4bb4-8f0f-ee6e3f4557ef", "value": "1536:86vHY7kMVfXhjGTKHb+fSP5rZg8gty+AVH4j3ECRBi1Nj/n1FBp0iQtfO:86wQMVZGTK74SP5rZSy+AVHERc1VftIG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740927648, "uuid": "45c0315f-c4a3-4454-9715-e5611ed99cdc", "value": 111912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927648, "uuid": "ccc48c2a-261b-4893-b451-01890a712adb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21ee0913-f777-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740927651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927651, "uuid": "ea13fc79-d627-4782-9301-5c83ef0726a1", "comment": "Malware payload (Mirai)", "value": "5c15665eae5f5fa9b50135a74ef6add9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927651, "uuid": "9bcb064d-e592-495b-a056-ede7bb6c90ed", "comment": "Malware payload (Mirai)", "value": "23397ff2b42c0b0443915ca69494e3a1de62c005da42d3ad8fcd209d39fd279b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927651, "uuid": "180d3350-52e9-4fec-bd00-789205885647", "value": "T1C1935BC0EDC3E4F1ED4201751177B73BDB32EA7D0139EA47E7A8AA3AA8126119351B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927651, "uuid": "1561657d-fb5a-4726-85a2-7951521f3548", "value": "1536:DdgGJVp30PYEfJd1LzZERb9ZOv337vXFONZhoHoy3YVEUCgSX9Do+yxhwRImUM6y:DdgGJVpEPYE1zZERb9U8PSIy3YmbgStn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740927651, "uuid": "ef1628e4-ed27-4875-ba64-fd3bcc2fb8db", "value": 95788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927651, "uuid": "ebc1b32d-6800-456c-97b6-deeb77acb44c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23de9d93-f777-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740927654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927654, "uuid": "0c7201df-7633-4b85-9119-b3c21c60da0d", "comment": "Malware payload (Mirai)", "value": "fcaa1c95867e5f8c12061491718663c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927654, "uuid": "071fe9bc-38d1-49ee-9e92-fcd895e3e798", "comment": "Malware payload (Mirai)", "value": "1b5149c3bb77f6dd0b2b2b1c4fcaa76b7a26db3069479cef4bbcd9c978d4ef61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927654, "uuid": "a693ab32-6445-4061-ab65-3c2324f869b7", "value": "T106D3F705BF610FFBE8AFCD3342FD0B0624DD584612A96B3A3A74D918B54B24B16E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927654, "uuid": "15aa6d94-7ccd-478b-b0a8-a89f8a7d6123", "value": "1536:OJkEZ1mHZgVmOPYyWWrKMn0JOdE6pBXGpya3fho9mf1ZZ8SHbNfwJnDOU:6lZ1j/FrGpB3fI61Z8OU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740927654, "uuid": "ee1a9cf1-5e87-459a-9b27-1fd6e032e61c", "value": 136336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927654, "uuid": "6a76c7df-6d87-49e2-abe5-6689e39a544b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a50380a0-f778-11ef-a1f3-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1740928300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928300, "uuid": "840bbc26-9777-47d0-ab16-fecfb919368b", "comment": "Malware payload (CredentialFlusher)", "value": "5689841ef88a9c6a2ede4c22a718586e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928300, "uuid": "02f3afe2-77a0-4cbe-b082-7deed97ebe14", "comment": "Malware payload (CredentialFlusher)", "value": "0bd8584e461b7bbc99ca2c097aa566ae1b8683507a1ba0c5a09c583a90b1bd78", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928300, "uuid": "ac99e838-d932-4a5f-9828-926faf574437", "value": "T12A259E0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928300, "uuid": "6c66506b-5055-4c61-b789-fb8b4b912b18", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928300, "uuid": "369bcc43-ad3d-440e-aa95-0506b746fe39", "value": "24576:LqDEvCTbMWu7rQYlBQcBiT6rprG8avRV:LTvC/MTQYxsWR7av", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740928300, "uuid": "b41b8f37-be6d-488b-92db-c4062bd6a9b9", "value": 967168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928300, "uuid": "f292ab3c-a1c1-4b7a-947f-419094697861", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae523983-f778-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740928316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928316, "uuid": "d6c5face-9ee2-48d5-b293-23fa23dc4c99", "comment": "Malware payload", "value": "5a62c13ab85eb6377d67ed44354a9c77", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928316, "uuid": "b55771b7-5cee-4ef3-b014-51536924c000", "comment": "Malware payload", "value": "56c580081946f76e53bf03d4a84cb04fc2cb1c130f4df92d173b44c577a46937", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928316, "uuid": "ca2af024-47fe-43ae-969f-3c326718dc24", "value": "T1F1E529E1674662CBF58A1774403BCFDAAA5D82B6C7504D83A89DA0BA7D63CC10367F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928316, "uuid": "c2077e9b-15f7-4658-988a-6c437ba352fd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928316, "uuid": "3b428819-5d05-4931-bfbc-0d72f6dd4842", "value": "49152:rZOpj145K+DVjiqcif7mbygTzHh2pqSvAtAS1GQ/b+XZGhCceifs8:EZdJif7mbygHh2pqSvAtA4/SX8re", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740928316, "uuid": "8e2b8587-ad9c-48f3-9dad-8fb024380eeb", "value": 3165184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928316, "uuid": "1e4c351c-806b-4442-a49b-3c95f3fa9e81", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6fc9178-f778-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740928357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928357, "uuid": "c173149d-f1e5-49f3-b63b-815255075b4e", "comment": "Malware payload", "value": "324459bec43733b0108987e4d829fce4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928357, "uuid": "09e24b8c-1491-4e80-ba4d-052d06d38f57", "comment": "Malware payload", "value": "ef8bc1fe65c6b27a5610b0c8c5da5a8373f3b3c59d9236cc8cb4da8b01fa4ed7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928357, "uuid": "f65bac09-bf93-4260-9148-c304a1568985", "value": "T17D9533067EEA023CED094AB51779EECB3F525AD644DDDEA81E8238BD0530DE6C2B74", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928357, "uuid": "4c50e183-bcda-4334-bdfb-288e0270a527", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928357, "uuid": "715baccd-01c4-41f7-bed3-31090b226059", "value": "24576:l3r/ir+iK64PZfFzD0zToBkxM3QGMcTl7ewJW+KOzgt6KnMBN/1qfGt8LP8jAREs:Zer+jP5Z+Qkq3QvoAHkKnKaifARo6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740928357, "uuid": "80290f86-e85b-4cbd-9176-838e5ff52f16", "value": 1876992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928357, "uuid": "7b222fa4-941a-4270-9188-a574b26c7d0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa45fd12-f778-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740928443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928443, "uuid": "2ef3d637-256d-4629-9d81-751467f6c36f", "comment": "Malware payload (Mirai)", "value": "fea41c7b2427799e21e1429508faa644", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928443, "uuid": "763ea4ca-e491-43f2-bff3-49c774ad286c", "comment": "Malware payload (Mirai)", "value": "18972d441f3c314a1072481068947cf6a094ac6063d0a164d2be942f898427d5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928443, "uuid": "215b9afd-0d62-4f58-bc59-e29e5bea2a0d", "value": "T17CC2D1A295F6CB17CC63437D1828167391581C55D70DDE3D272BAECC53884F62ABAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928443, "uuid": "b716ba08-1a87-43e4-ab59-391b507957ff", "value": "768:X5+Kcrb9VDJef5Q2PdHuzb8HoEPbj5Bn8:0lrb9vehrpEOoEf5B8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740928443, "uuid": "f1258b88-cb19-4fe0-84c6-2701c45cfcba", "value": 27712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928443, "uuid": "e6426edf-9840-4cd0-a474-64b50867d7a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0befe501-f77a-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740928903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928903, "uuid": "5ac3581c-7bc9-4d4b-9bf9-ca30edba6e67", "comment": "Malware payload", "value": "ef59156a7daa712e5a1ba3de81e55c02", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928903, "uuid": "c80030b0-4dea-4b95-9f9f-12464d9ea3c6", "comment": "Malware payload", "value": "c53be53911af3f2a8c9df14aecc6ac665955262b9598183e0ed337fcb468b126", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928903, "uuid": "0922e479-2260-4998-97bc-0b9afb11de79", "value": "T1D253F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928903, "uuid": "f0e3ce9a-f273-4b5a-b423-2bc905f41fba", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dIwR1X1t1RB1p+dF2sAz:aA1fho1P6n2SwR1X1t1RB1p+dA1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740928903, "uuid": "a446857c-99de-49bc-a251-3570c5df50f2", "value": 64433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928903, "uuid": "56ca3e3a-8287-43e1-8b6b-800780aa9410", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8254899b-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740931146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931146, "uuid": "ab5445d1-9447-4b0d-84f3-3e4822a19581", "comment": "Malware payload", "value": "156ed0955022257e670b2688cfa1cdc0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931146, "uuid": "fcba5a5e-217f-4a15-8de9-d33943c8b998", "comment": "Malware payload", "value": "88173fcdbde821ab56976201c3fb472be957e7d0a4eb2641dcbc74ac1e9ba00b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931146, "uuid": "31f744d2-9fe7-46af-9721-4cf8490b84b2", "value": "DF4302D01761278C4375D9753CDE304E86341A2F72E63D102EABD18AF45A622A8B7EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931146, "uuid": "c77a2b6f-a921-47cc-8043-29f8a6f080af", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQA4:8D+CAXFYQChaAUk5ljnQt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740931146, "uuid": "30f6ff53-0ce8-4057-af1d-ae3f60f16101", "value": 56628, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cb14da4-f780-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740931481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931481, "uuid": "9c0e10dc-7191-438e-89ab-89b6276b9eec", "comment": "Malware payload", "value": "c83ea72877981be2d651f27b0b56efec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931481, "uuid": "6f9aada9-fb8f-42fb-89cb-3f7abd3f72d6", "comment": "Malware payload", "value": "13783c2615668fba4a503cbefdc18f8bc3d10d311d8dfe12f8f89868ed520482", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931481, "uuid": "5add6fb9-5107-464c-a209-d0bce036a4c9", "value": "T138A4F18672C84B11C46A1A78C0F7592913F6EA83BAB2E7493E8C81C91E877D5CD4D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931481, "uuid": "475bd73b-60c6-4f5b-a28c-9d4c5740f4ca", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931481, "uuid": "ac831f01-381b-4c85-83df-da8a47f5f16c", "value": "6144:bncN0em3Zxf6ziPJK2EUC/elB/xvpzwxvapH4Wguea8VAi52597eN++8cPtmD:i0df6+PBtlBxqdaN4Wgq8VHu7eYfcPtM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740931481, "uuid": "317739fb-06b8-4b29-9865-6b6270c5bfc8", "value": 456192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931481, "uuid": "bbbf5ce4-f696-47af-84ee-f8372dcd1fbb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f3fd477-f780-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740931566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931566, "uuid": "281f5318-f253-40bb-951f-28e2ebaf4d02", "comment": "Malware payload", "value": "4f1d82300167fce768f9612f547e90ea", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931566, "uuid": "21643004-8162-4e6a-830c-20930d54c9a7", "comment": "Malware payload", "value": "c5f83f154904a5801bd5834479bcbfaf15729b1f5968fd3eda9ac58478cc45b2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931566, "uuid": "fb024ad4-6629-4cec-98f6-641de9a5f9df", "value": "T1E9E55BA1FA05A1CFDC8A12B4943BCF83991D43B94B544AC39B59647ABE73CC319A7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931566, "uuid": "2b4e420d-e6ad-4e2a-aead-8e6d86388528", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931566, "uuid": "d97377f3-8a72-4717-9561-f7d5656dd817", "value": "49152:fwRr7PnfVLy8BtwTHyn1N7cQpJzNfnCIZUE2MPP6rnzTqsWY:fEfVLZBtwTHyn1NNpJNfXr2wSnTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740931566, "uuid": "2f76b35b-a747-4dd9-aa02-ef362cf43152", "value": 3175936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931566, "uuid": "6b212034-d71c-4778-9aab-2c142f643e43", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72887789-e514-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1740933667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933667, "uuid": "43031c4b-940c-40ae-b785-afb62433d4a8", "comment": "Malware payload", "value": "cbcb58ffe45c202c11bcf2070496aed6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933667, "uuid": "e042e95c-90c3-46a0-b215-b636bb785c1d", "comment": "Malware payload", "value": "7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933667, "uuid": "0ddf9edd-40f5-49bc-996e-23ff2ba578b5", "value": "T19DF53329C35BA51C444ED111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933667, "uuid": "e1e0022d-81e6-4589-830f-7bb4acabf9cc", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1lu/:SyrPO3UDsdXp+z8+FWyE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740933667, "uuid": "842a70ed-72a0-4d47-8644-54e8b5e5e4be", "value": 3528005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933667, "uuid": "ce1ebe1a-e887-412f-891d-8ebb8c711f27", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7255fae2-f785-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740933799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933799, "uuid": "207a6273-f3d2-40d7-97f9-cf01e612ebfc", "comment": "Malware payload", "value": "2c87d4036f6bc92ea313365ccf695344", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933799, "uuid": "9b276537-2418-433a-95ce-83b2ef122448", "comment": "Malware payload", "value": "f2f60bfdaa212a063a17ab83c93cebf534e0a339ada1d081bf9b9f9b62a85511", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933799, "uuid": "a992cd61-f443-4a5c-a5b9-2b4ea8720c0c", "value": "T12124DF976E3860D19381F39AD1FE338C831E015D561A20CF5268A879DE5AF14FBDA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933799, "uuid": "032f7f1e-0aa7-43c2-ae94-cefcc0ba3a67", "value": "6144:NaXl/3kU8lGU4WhCOQdjqsmlMD23qdLVPwZs:2/3k+pvOIqseadhgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740933799, "uuid": "5fa6bab1-267f-471f-9102-1b74fe397e7a", "value": 213593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933799, "uuid": "77a4df27-0643-4823-9b96-8cb44eeca30b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6041475-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934744, "uuid": "369a5ac5-8aa5-4d4a-a4ec-0cb09e338b4a", "comment": "Malware payload (Mirai)", "value": "9e7675b01142e5eec2cb8f0cc9523ce9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934744, "uuid": "263f72b9-4bdc-4b11-ac15-438391632def", "comment": "Malware payload (Mirai)", "value": "81f89d72b348ec396a62ad56d7fe041f3733f38e33c3c6f40d15b7bc8d95f9a3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934744, "uuid": "4c2d359a-072a-4be3-abbf-dacd330a09e9", "value": "T127D2E0BC7B0145D7CAAEA1784DE50B262D608FB3F1426C0766A4D9D7BB0986C2CB5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934744, "uuid": "ce6ccca8-0760-4c76-86a7-66115d37a910", "value": "768:94ylAtv6pqLJM0RXaxGyUbXtheU/SL92JgGlzDpbuR1JX:GMBqTRXa+Zhr/fVJuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934744, "uuid": "3096d3dc-0765-4a87-843c-5546926ef487", "value": 28876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934744, "uuid": "df671067-04e4-47f2-b150-df3a539e028f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6177b29-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "ac4cdc37-952a-4190-a2a6-10d98c6751c7", "comment": "Malware payload (Mirai)", "value": "304e1985c8f47139ddafe76ec60bc146", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "467f0dbe-479b-482b-8aa8-8c8c11dc677c", "comment": "Malware payload (Mirai)", "value": "28a9657ccb946e12c6c6d5eb0f6db41ecf76213f2c868509f49a77b07c469a0c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "a482bcc3-60ce-4e24-bbf3-570b7116d61c", "value": "T1F3732A26B97A1E26C0D4B57E60FB8B11F5E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "37445a60-00ef-4ba2-87fd-4da0999cdf44", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9Wu:927jqCt8v3GI/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934745, "uuid": "fdff92d3-2321-4114-bc0a-6f388fb43f85", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "bab1938c-a9ab-45c8-867e-8474af63834e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a61db62f-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "389e9b86-b833-48a7-a472-d33146b1e8bc", "comment": "Malware payload (Mirai)", "value": "ce9fdb6418969534d87e5737c954aae0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "c16c221d-a541-40b7-baa3-afbe1147bdf7", "comment": "Malware payload (Mirai)", "value": "12430d118bfb2cc310e487d7db05428165e315d8d3c1fe42f5748beb3359a062", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "b090b3b8-d8e2-478d-a9a1-7550e860e748", "value": "T1A2533B99F4028E3DF88FE9B984160E05B93023D212931B276BAEFDE37D331659D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "27568cfa-7f0a-425f-bf29-91f2adeab83f", "value": "768:me4gpsM204GEkRbjveXQonQiuQtt7v3gFHy1eu48B8vB6J7EzNfXQuJpozCE7PD:mo3EkRbDfDiDHIFy1X48B2SEzNfAuJcf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934745, "uuid": "518abc68-2138-47a8-b2a0-eedeee33ac2d", "value": 65100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "a6f811b8-08af-4f26-8271-c279de97ec64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a62475ac-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "1214a7d8-47df-4633-b14c-e1a811582e1f", "comment": "Malware payload (Mirai)", "value": "3029542ed35c6dfa3380a5e16dbdad0e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "ce05c078-a7e4-45c5-bb4f-05d818e67b8a", "comment": "Malware payload (Mirai)", "value": "d746ef09cb8d54301f2504eeded1f1efd92a0a5283c9c163407f86696c08a3ab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "f4ba2744-e5d4-4c3f-ad22-28c5646cddb6", "value": "T13F538D75D12DAEA8C0424AB4A9598E704F13A0C046732EF7DB9587A69443DBCF858F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "594cf40d-e6a6-4f13-8c6e-c524b5f6344c", "value": "1536:zag/Vdf5F1LwtkbaOoQ3veifs3guba/qzCEZaCw:zJzf5TLcQfPf+gehCEZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934745, "uuid": "12ffabce-4ee9-4ce3-94ef-124db88470b6", "value": 63484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "40ccc2db-44b0-44cc-aa24-8c82ead4790b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6409f17-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "086b17ee-166e-4833-b747-d9211d6c154b", "comment": "Malware payload (Mirai)", "value": "1799c08b3457f730c2207939c999f37e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "1fe698b3-cc75-4120-8eb8-4017b52d3177", "comment": "Malware payload (Mirai)", "value": "827b2982b1f0f301d6985cb6b22f1aa027fb7a1387b6e146c47086ed3c992637", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "495ddf1f-a288-4a5f-8260-e1454f11e144", "value": "T1A933F1B692ABAD71C17041FB163D64AD64162778E3E6F10356620470EACB1F24AFE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "1ff5327e-827e-4588-9456-640ab7e47c15", "value": "1536:ICoqsGR4eB3g0Vmh1IxIpC8JoL9VE8amFZP7R3v:loqs2Twh6P8JoLJ9ZP7R3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934745, "uuid": "2a3685de-035e-4956-b630-8136ce55d6fd", "value": 51444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "6b4e4ded-8176-48fa-afe3-041b4a2a332d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6949be9-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "5fbb115c-b58c-427a-8d0b-46fdf0135456", "comment": "Malware payload (Mirai)", "value": "b67f19bc16802f971daed799958a55b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "0757075c-729a-4cd7-a99a-917807e77095", "comment": "Malware payload (Mirai)", "value": "112eb358613fe7de5f82e8912925f6b6f9df59313248e45ad4dc1122ac998cda", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "1b288e43-dbb5-4afd-baab-51fa22ccde69", "value": "T1FAC2E0695228D472E1B45836FDBF01036736CFF8D6EF322622144735E087D26A6B5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "3933fe43-71bc-4ab5-ba25-96099d96701a", "value": "384:KBH2HEdV7UQDoYQHXxcjllK5+AWaFmK0MF9lz7X6AGexXVzonBY6plNEkrhymdGV:byNUQUfhQllxlaH0MFjlOnGshs3Uozr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934745, "uuid": "35cdd128-a5a7-45de-a1b9-7f7dee9a42a8", "value": 27344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934745, "uuid": "64bcdbc4-2c76-49e9-9d8e-d74262a1a582", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9ec785a-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "414a3fe1-14a9-4117-8c61-ac0a69c50730", "comment": "Malware payload (Mirai)", "value": "ff761b680672ac7b18efce5e3b0719a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "ebbf53eb-f659-4004-a195-00d2a08d52c8", "comment": "Malware payload (Mirai)", "value": "846663d0620313fb4ffe321bb7bfe1b37f48c15952de31141f4b0021be850f52", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "fd30935e-c6b3-4fa8-a1e9-944b14961550", "value": "T194B2E161E1863E62D770313AB97CCB0157AB57F8B0E672752528B7AC4BD2C4760B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "39aa4a07-f951-4f1e-96f1-6f81b5f66c03", "value": "384:MZUX11S49enZh57fYONQ/yQVQbFxD+ckPvDxqSwPzMvdHjhymdGUop5hK3:nX1De9kONQG5xD+jHMDzuDs3UozY3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934805, "uuid": "4923fb52-2820-44e7-8252-995c9b44b787", "value": 23732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "119de2ea-9994-4d28-920b-8bbef05d5c86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9f13744-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "ea6428a4-6bad-469a-9497-1a54e7a1e8d3", "comment": "Malware payload (Mirai)", "value": "219038f4c740a8bdd8a4ca981685fddd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "8208a678-ab05-40e3-9d51-71cde3d364d8", "comment": "Malware payload (Mirai)", "value": "34eca224d493c066146fb61583d854a71b1365c14914d7dddc209d880f228cb2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "22edde0e-5264-44cc-b4f1-b7c7d1448c02", "value": "T10FE2F1116A168479EA308471E0F6818767762BBCB5FEB0B64567060DDCC2A4293F1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "51e59397-eaed-4565-b34d-01e78e910d7b", "value": "768:wEKkUgXAnURCr6HmDFStmYtWM9q3UELdZ:IkEn7uHEemZVL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934805, "uuid": "b6d6887e-93df-46dd-ab88-0a659a8d6f50", "value": 31872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "e2404f04-cf5d-4191-b386-929d75cb7254", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca21bb3d-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "cc5ab5c3-aad3-4f96-8cb3-f4e5f08bc672", "comment": "Malware payload (Mirai)", "value": "61bcaa8d1193104b271324c36fc872a6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "b95ddd9c-0d3a-4970-b247-54ff006996bc", "comment": "Malware payload (Mirai)", "value": "af32fc46d8d8e9da300cd62bf3851059cd6f2e1de4fac77730072c1bbbf660e9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "eb479a0b-8d0b-4fac-a995-3abeda884643", "value": "T19DC2E091E1F62EC5FB7A7E502B65D2C17BB00E9EB7B78CD2255DAB0408B721B07057", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "0e3d751e-e973-400a-800e-2b12feff2274", "value": "768:AG959yM0HWubJsWDYcGH254uVcqgw09S0/:OM0HRJswYcGH254u+qgw09S0/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934805, "uuid": "23cdeee8-60b2-44bf-8a4c-e274bb2d752c", "value": 26232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934805, "uuid": "7568719e-7275-484c-8a5f-3be141d28c9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec94f6b2-f787-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740934863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934863, "uuid": "186b5bea-0f85-44e0-a175-dc53df9d84b8", "comment": "Malware payload (Mirai)", "value": "4fc0ba2ff7463fa78e68e67ecdb60606", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934863, "uuid": "8ea3accb-4e1d-493d-9c8c-d105ac27ff29", "comment": "Malware payload (Mirai)", "value": "11c72af623904fd071c8446bc23340425b1da3c4476aa9ab104fe7a2989944ec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934863, "uuid": "8af28d4d-5d46-49f6-9c37-70278b00386b", "value": "T1D4D2D0AEE57441C5FD8E1C3E808C3FA10E19E581230BDB5277128C8D5B36C57F5AA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934863, "uuid": "7ac553e1-c8cf-4227-bd97-34c32b13233e", "value": "384:n8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjexibRWGVCz0Nvf:8MYHb62x4ahQ3CfdwLjQWC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740934863, "uuid": "07c26027-df0f-4a01-b2f1-e9c4987d1a03", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740934863, "uuid": "f73d3b56-a567-488e-9a0d-c1327a4ca4d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73416b00-f78a-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740935948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935948, "uuid": "13cf0d4b-baf2-4f09-b15c-50571fdf7bc9", "comment": "Malware payload", "value": "ab2167d18632e8bc7d2098235f3171c5", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935948, "uuid": "0b56f02f-dd55-431d-8675-c6949564f144", "comment": "Malware payload", "value": "bde97d14ad3ffb3b12aa5eb6b31c4ea060407c1a93f65a386c9a51936789a8e9", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935948, "uuid": "1f9be875-3413-46a8-9a77-4affe4c37b61", "value": "T19B66010A42527628ECBDCDF1A245E66AECF7C8573D1030E5B95AC327EF1AE74E5907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935948, "uuid": "97ca9628-eddb-4bbd-8d9a-7f7b23e9cf64", "value": "98304:JhHha+sPRU1oLvvq1PHYTYLVvJ5fMpYJ68pn3UYv:JLH1AvvUP4Te7D4in3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740935948, "uuid": "ff8e6d27-fe31-4c90-be3b-031aef3d3628", "value": 6631883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935948, "uuid": "5baa7f4f-e9a9-4c55-a37f-4cb290c11118", "value": "audio/mpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23e0eb20-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740936244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936244, "uuid": "7710cae1-4346-472d-9691-68c544f78722", "comment": "Malware payload (Mirai)", "value": "2ea760ef4b22aee48e45eb1e8ceb0d4b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936244, "uuid": "2e3e5ada-b734-4e66-8b58-30602b594414", "comment": "Malware payload (Mirai)", "value": "5b1ffe35af83713e7feb518a8eb019b32122f9d8214962c7d00ae2c10f6844ad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936244, "uuid": "42d34f55-577a-418d-a0ae-e0f3472e2bfa", "value": "T1BD934B03F9624879C093C67597EFE6238A33BDF6171232075394EFB12E21A917E59E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936244, "uuid": "d342182d-ada8-4988-9658-39b259702b21", "value": "1536:4piRsCubiaxWtNddRvesB0MNIQmuphaAQrLd1gQYC88P:8Of2sFuuphaAoLd+QYC88P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740936244, "uuid": "585106b8-d3d2-4d20-aab9-5902ee1d327d", "value": 95227, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936244, "uuid": "7c89edc0-af70-41f4-a0cf-33f0d69db7e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8641fe87-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740936409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936409, "uuid": "851d1392-b404-48c1-aa09-833e3b7da897", "comment": "Malware payload", "value": "6929020c4b6c01f7e9559fc606463324", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936409, "uuid": "11c4b942-bf76-432c-9a8b-2b57f72a7f7f", "comment": "Malware payload", "value": "b1cd5ea5cfbdccfef8f6b3b4bb110b42efafda076130b9ee1cb85ce2ff407a6c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936409, "uuid": "4398daaf-ec2b-47d5-bc77-4477542a8ae0", "value": "T1FD159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936409, "uuid": "dae8b2c2-8bd5-4be7-a617-bd4d1b7758ae", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936409, "uuid": "70c24afc-261f-4de8-a424-3132c1bc4f21", "value": "24576:7qDEvCTbMWu7rQYlBQcBiT6rprG8aykF:7TvC/MTQYxsWR7ayk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740936409, "uuid": "1d588e61-9ab9-4cd4-99fa-5ae69c3d15e2", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936409, "uuid": "5513eda2-2dc9-4cd6-9e82-ecdc5f9cd8dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e68d21c0-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740936571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936571, "uuid": "5cb40fb4-7660-4d18-91a5-769682fec4c1", "comment": "Malware payload", "value": "82a3f4d6718c256f44b136b8ba794e6a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936571, "uuid": "b1d52e0f-7d66-4a48-b6af-0d5157426162", "comment": "Malware payload", "value": "5bcaa8c3ab452be6b078576bad09058f3e3ecdbee927f6b3a41c153602d4156e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936571, "uuid": "b066a678-d266-4372-a5c0-fa957156cefb", "value": "T1E48533077CEA8DA6C3289D32733586B87878D14E54FDFEC73AE746214157860A7A1C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936571, "uuid": "035e1873-6569-4a2d-bc4c-71fa87ba7768", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936571, "uuid": "b2552d3a-646c-4075-ac27-930c489536ec", "value": "24576:cpAeqGeefFTVYZkwaEI+Qb7XeA3/MiLvu4LHJbTUafcKE/AUeGiMxlfZ28nYIBI8:dALTxiVQb7OBgHJXG/cpp6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740936571, "uuid": "5f29cb10-c325-4182-9ed9-9633f6a2bfa3", "value": 1838080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936571, "uuid": "cc661c50-7379-4867-88eb-be8c83aefbec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2fb98d5-f78c-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740936994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936994, "uuid": "437836d1-6917-4020-8848-ea199e716723", "comment": "Malware payload", "value": "670beed95aa6f7d8c32282f24f5e45b7", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936994, "uuid": "4e6811d8-49e8-48e5-bf6e-414a4042458a", "comment": "Malware payload", "value": "82dbbcb8189b7a5df53a22723161772fd5818a4cdbeb782ef0704dcdcbd63e9d", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936994, "uuid": "47394b6d-a67b-461e-ab5c-28cf21e6bfbd", "value": "T14724D09626F99D8926379042D9BF1BDD06E3A0BC6728390EC554F47EF08C8D4E3C65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936994, "uuid": "7044c0c9-6022-411c-98d7-f0b0de57913d", "value": "6144:JtkMw2hmaTeMlwJp7LNa9yuqPNNhwHR1TprgyolqQ2:xwqnTeMk1Na9yuq7KH/qY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740936994, "uuid": "cddfb23e-e2ea-436e-9adc-db588d0e7234", "value": 213072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936994, "uuid": "fb5e61df-c484-4589-aba0-0da24a45c2cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "496e6fd8-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740937166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937166, "uuid": "c11c97b8-b8ad-457c-a7f2-665d6a0ea84b", "comment": "Malware payload", "value": "897f0f70ddaa45358c181ea20895e87b", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937166, "uuid": "72da7adc-a2c8-4836-b123-47bc9680707b", "comment": "Malware payload", "value": "318e51dffbc41fc6f09fd5bf997830e90d52dab272fbfdce80dc03ef94fe7a14", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937166, "uuid": "9d7be503-3c3b-4f57-918a-02d7c8555bff", "value": "T10394F18372C48721D9AA4179C8E7582803E7DBC36673D5997E9C92C62E837C4DD4EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937166, "uuid": "28d75e76-797f-4dcc-ab54-14cea7e6b703", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937166, "uuid": "3e1ba5e7-fcdb-4689-ada2-e13103e628ba", "value": "6144:bncN0em3ZxfIsbpkQoV6K4+BX7Kg2Y8AT3ETuLrhP6ak7Cx0nNCdmDJN9aqmBFk1:i0dfIpQKDBT8ATAwt+PUdYMFk2wx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937166, "uuid": "f792910c-bc1d-4cdf-b222-7806492bdc50", "value": 443904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937166, "uuid": "22b9fb16-bee2-4122-b003-5767c2c4558c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83de7742-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "089624de-cb52-4d2e-ad8c-27174ab9a929", "comment": "Malware payload (Mirai)", "value": "e66ba26da641b329951b2cd6e1b136e3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "cccc52ee-19d1-4ef2-86b2-586d74048a33", "comment": "Malware payload (Mirai)", "value": "cfab26ac29027d531213bbf030cd50c84b4f68ee7012070ffcc966b1c79313d4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "5447b071-4304-4fda-80f7-4505314d2bc9", "value": "T19803F751BC829A77C2E1137AB6AE4A8D336163E8C2CF7217DD214B607AD651F0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "554e3863-44fb-422c-9b79-982ee9501992", "value": "768:AgA/wMCbXsG5f0OJnlUlcOlF5AdwAAb9XDWd2v+bAq77TEXoTJ/NMwWd:AfWb8G5fblUlfbgeaUv+fEGHWd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "82a0ab2a-6e95-4506-bf00-8774c19a4cd8", "value": 40752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "d8380531-9e99-466b-8662-05587d5c6853", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83de86da-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "c2ed0bad-9b15-4f45-90b8-ca572fd55750", "comment": "Malware payload (Mirai)", "value": "16e33cc5da801452feb5914d80e536fa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "759a0eb2-e539-4e2a-9b07-cd7132347246", "comment": "Malware payload (Mirai)", "value": "b6020112eafddc7e22f079c29f6a23cb9d24c94d506507b9037f825664ac680e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "989e681b-c670-4356-9215-52ae19515530", "value": "T10D83D606BB510FF7DC6FCD370AE91702348C594A22A97B367634D828F65B24B59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "835851db-9c47-4b19-a0cc-5b0bc3716cb8", "value": "1536:iVLyu95Kuckj752dCexuV/8UZlDwfkJ4MYfWw:iVLyMgQFezxu5VD1e1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "023c37b6-931f-453e-9493-aa25064c320c", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "67b6a329-8767-44d8-9d1e-2cf6795976d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83e8fc5c-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "0694ac0c-e19f-4d0b-97b8-208c2e33c74a", "comment": "Malware payload (Mirai)", "value": "c85a0951856005551df62d9e574cb45b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "c045eaad-093b-4793-83bc-baf5a1a2cc93", "comment": "Malware payload (Mirai)", "value": "3a6209ad1e63cd831750c199e187ced4cc8f18ac052ecb268abc2d895bae54aa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "c2ba8e7e-387a-45ab-8b8d-c446f5528f63", "value": "T10F83A51E7E228FADF76D823147B74E25A69833C627E1D641E16CD6012E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "1457cde0-657a-4a63-b96a-f20d7e8247ff", "value": "768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTM7ZDYovZ73x/nL8y8Q3:Rakdn2Eo3ePu5GTMRYo99Be037Wk/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "72aaacd8-f225-4143-aed5-90b57ef354f2", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "5eb8e2d0-89a7-4483-adb2-0607b6755353", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ed911d-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "8194ba83-c854-41db-9cca-e2fccde0e0fc", "comment": "Malware payload (Mirai)", "value": "42cbd01b1024a94e8770143cb77e8dbd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "47fb8cc1-0404-4695-ac98-241f53c3b1df", "comment": "Malware payload (Mirai)", "value": "0451b1dd7893b334719b1642aaba3136f65cde55ee4b01ea06514c6b77687624", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "2454a98c-1946-4ad4-8f3c-3861e52a8cdb", "value": "T1E4534B02B31C0E07D0A31AB0253F5BD197BEEAD022F4F684656F979A9671E361182F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "dac2df55-2e59-4854-aa7f-536c1a87ec7b", "value": "768:SEE5hjcoCkhVRGfRnbmX7/mG1nhG5UmtTy5EMXp/p9OyDQvSFRMNYL6FV+tg6wWC:+5HAdOmGyNtTAdBOyUaFRMNae+aTWzO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "a489772e-fd78-46af-823f-9663282fe69b", "value": 62996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "23e9d036-1a78-4071-8e54-2f182ad686c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f35bf9-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "3e1c79a6-63d4-4eff-945a-4dd106bee1f7", "comment": "Malware payload (Mirai)", "value": "63a81f013e981cadce3d2ad11423940a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "592a2c34-c402-418b-9951-f415b15b5020", "comment": "Malware payload (Mirai)", "value": "83820e72645685d287de4d93f39f26877969bf426338887372fe18374bdfb2b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "ded45389-b62b-432a-b3e6-3950a0e0aae8", "value": "T1F5632851BC819A23C6D1127BFA6E028D3B2613E8E3DF72179D225F2037C696B0D27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "8d3bd46c-6384-4949-9b86-39a09a673d32", "value": "1536:ONKlxkmiig51kRmO//kWUzOviAsDwY8rNRuVAvvW4:ONDWzk1KviAsDHaJv9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "b3fa9c93-15af-47d0-98a8-5add16b73ede", "value": 66920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "906ba32c-750d-4fed-8a36-6c8c72b11ad4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f61c39-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "ee78da7a-c63a-404b-91c8-65911b3c217f", "comment": "Malware payload (Mirai)", "value": "a4e4b87c002ed90bee629788cc74b257", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "c13d1c47-9e2b-48e9-8f0f-317f7c678c00", "comment": "Malware payload (Mirai)", "value": "2eb6b981b159cb3310eca77ecc7e85b8a409757d7e34c48f56cb10dd0588ed49", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "798331c2-dfcc-46a1-bf2b-6ec1f5d5c67d", "value": "T119633BDAF801DD7DF81BD77A4453090AB630B3D542831B3B63A7B9A7BC721A81D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "c0981b85-bf72-4777-9bdd-e04c9dcb2f60", "value": "1536:fAgVobxE+5DDYrly8VhyCO1sxyWbxdJiLU11i+VQgK:fAQobO+hErlWCO1GySx/o+V1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "55bbd994-c4a1-4b6e-9a8f-a431411bacd0", "value": 69636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "c9d163ab-0663-459d-8a75-3990f6882761", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f69a64-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "27cfa870-884a-4635-b32d-51665f0e2f13", "comment": "Malware payload (Mirai)", "value": "28e519c6c1340e2996e1a6490f47ece0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "2c6e4e71-e02e-4cc0-bc2e-840516dda4d1", "comment": "Malware payload (Mirai)", "value": "d5d8ba4daa0cc61872b816c1773c604b8165927c8100cdff3b8c75cfe8d7de87", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "5d26d662-ccf1-459e-94ec-198284992e16", "value": "T144E32B56EA408B13C0D61779B6DF42453333ABA493DB73069928BFB43F8679B4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "c615dc01-ed54-4f83-81b5-b4cd0de5d36b", "value": "3072:CJLce3pC5ma7/abHbz4NpaIJ8VIJ1FrUXkkTM/9cHMY:CJLce2/abHbz4NUIJxHrUXkYM/9gMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "9e4e88b4-d242-4095-8b57-b301aff8fdb3", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "94b60729-5575-4a31-b0b9-857ad02e619f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f81432-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "d1fbd113-e548-4ac5-afde-1e32fbf3a136", "comment": "Malware payload (Mirai)", "value": "7c703e53fcf055988a4b43e92f249502", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "e6eb7ea4-3661-4b77-8c10-dc55c0d351d0", "comment": "Malware payload (Mirai)", "value": "21bf589b98250baebfed177b8ddf8adbb4adaee5983780c3862d009b9f715b15", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "403a53bb-617f-49be-a37e-00c62474c7ba", "value": "T1B7534B17B54280FDC09AC1744B2BBA3AD93775FD0378B2A67BD0EB262CA6D211E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "7b24a6ff-aba9-4baa-af80-218673987448", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQJLiKimfFoktCe3fYRMn:WShU3q7cEDlCK/0Dh9i8Fok06fYRk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "800904a3-3378-4a8e-96ad-c884c296e2d6", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "a7c92912-3824-493b-954b-b4ca4a15043a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83fa5f5d-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "73a5decc-621f-4977-81b5-817b25788311", "comment": "Malware payload (Mirai)", "value": "dd7c4ba065ec85f2b3608c14e37b7f6e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "b1e98090-a94a-4da5-ac07-9af8e2e6d062", "comment": "Malware payload (Mirai)", "value": "23c127e1fc5ec951aebc69ab5b2c73b8c75a469c861021cef7312553d0e263c9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "09a6bd38-7ff4-47d5-a5a8-0369827ac7a4", "value": "T120730756B8814B12C5D5127AFA2E128E332317FCE3DFB2129E206B2477C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "f894bb7e-a99f-4405-b785-11b032df910d", "value": "1536:2ln25xPBXk1wnnkL7+KE007IIRMqai90DIyiUNbsvHTGcV5GYIW9:7xpXCMkM/3TaFNbsvHqcVER4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "95b67ebb-71fa-4c87-8f01-fe7c0c54fd4f", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "3a2f256e-31d5-45ac-897a-1539c1d7fabb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83fd26b0-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "bc9cedc3-a62a-43a7-93b0-95ddcb3b11bb", "comment": "Malware payload (Mirai)", "value": "ca551f7359c2c8bd87dde09ad2bfc998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "b366f3fa-862a-4763-9519-0d739189835d", "comment": "Malware payload (Mirai)", "value": "d475289f12396cf1fba8d415f8b990ca250d59413c28b4c925d2312f18a4bb49", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "324e91f2-877f-46fe-9980-46ac743ab66f", "value": "T134633A21BA761E2BC4C1947621F74B25B2F143DA26ECCA0A3DB10D9EFF719846543A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "86ab239d-d382-400c-aec0-6285fca7f3ee", "value": "1536:lGRaTYmol/hGIAs4PNvA7QIGm75123tStEl:lya7hJkGmVD6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "ad8cbaa7-c469-4d72-8285-f17b7f929eba", "value": 67320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "aef013f9-abcc-4d10-99e0-98425f4504d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84110c85-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "24f47fff-59fe-4231-97a8-041e69790296", "comment": "Malware payload (Mirai)", "value": "7f7cceeec72d1a8902dff5fd93b0c573", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "186b5eef-6754-4d17-bae2-a8c6c5935ccf", "comment": "Malware payload (Mirai)", "value": "5792c33b335d85bd1e94f152385fc5c09c8657c9997263fc476e372548dc165a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "231ed59f-f0bc-4686-82ad-7b6596dbec63", "value": "T163438C37E96E1E74C04641B074748EB56F23B5C883972EB61AAAC2795483E9CF504F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "97ae0500-2cf6-4e45-82b1-693a6f096d2f", "value": "1536:Vaa0brW/Od9hlCR3KJkKYXwKEpPDCMC2+WQ:Vv0brWGd9X5JLYypPDL+9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937264, "uuid": "7d8a6adf-1a3d-4d7c-9d99-d05ddf055e64", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937264, "uuid": "0b806f4c-b67e-4db0-89d3-7de831f3d710", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8421a914-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "406b9f59-f431-4ba0-a1dc-cc9943439073", "comment": "Malware payload (Mirai)", "value": "38f229b7525ddf42c0d31ae8ec4a615d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "691ea725-f0e3-498d-980b-98ef116cc739", "comment": "Malware payload (Mirai)", "value": "b929d79a261dfabd4d1ea6717e2817e4100264a924b618e1a52a7f2033b102a3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937265, "uuid": "8db4f3bf-f922-4eec-be4f-d1b9651832fa", "value": "T11F637EC9E287D8F6FC1705702036E73BAE71E0AA211CE686C778D5B1FC86941A117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937265, "uuid": "b87517f9-0372-4a60-89fd-2d91ad598ef1", "value": "1536:pnUQJZdRlDAXO6QyQwOaOAeTxVx97qJ7RvsuIr5bhW8l:pnUQJ7RlUXTQpwOaOA+xVn72+uWfl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937265, "uuid": "60ee4ff2-ff0d-4597-bba6-8ab59053a820", "value": 70736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937265, "uuid": "2d0c3e39-696a-419e-bbb2-5f1a2fe53b73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8454b379-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740937265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "1d9d9ba0-2b06-4744-9a44-60afe8c3c923", "comment": "Malware payload (Mirai)", "value": "18d9a9e1c1415f7f3b911d0104c60218", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "9a0293be-3ecd-4297-8140-3a06a4208f92", "comment": "Malware payload (Mirai)", "value": "2abd7c6c15c3e5b3eeb41838c9b6e0f390562019b10c353323534b8d71f7d0f1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937265, "uuid": "7b0603ad-6144-4282-8b3f-99707ef8db0d", "value": "T123436BC4F643D8F5EC8715702077FB379B72E1E922A8D643D3B4D932AC52651E606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937265, "uuid": "fb10ac07-1d0e-48c4-ba7a-9b82a524386c", "value": "1536:JeESt/basV2rcZhG6ySN7naflSR9zWOIaEjrqMas:JeESt/basVTgS7nafQRVtXESl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937265, "uuid": "4cafe720-64ee-4ebc-a46c-d4ea3e893e1d", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937265, "uuid": "e5baafb6-ae49-4fe4-8b56-95daf0be369e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f2b7c60-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "0f25e2c6-fca6-4b5e-8298-40a0fd4cc037", "comment": "Malware payload (Gafgyt)", "value": "83f6063d201dfac956dc3a2087c02fe3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "322c3bdd-ee06-4c64-b221-83726a5e4c98", "comment": "Malware payload (Gafgyt)", "value": "01fa8871a3c3d8098439db84559377f66898b1d530082d3605e25daa18fdc96c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "bfc23583-8872-423e-b93f-86c6c9dd01bf", "value": "T158D30757F800CEA2F40A9A7605D31711B671FFB64E9321B2A61B3962AE322D53477F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "b6e86b16-3803-4dd4-a87a-80fef8c9484c", "value": "3072:jO6AwlPeV85Rt89ASKdN8yyQp/GRZgq329UJgx/m7HBLmey+niPGngqHk:jOhkpRt89ASKgyyI/GRZgqx9mey+nieu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "9229eda2-1dc7-4a33-9aa8-bf9dccfce6c9", "value": 142024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "fb2e03da-e84c-4ee3-a131-5d7a2a48c3bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f3436d4-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "f4106892-9abe-4e5a-83c5-3db8b390b939", "comment": "Malware payload (Gafgyt)", "value": "2986edfa9496c41d60747e24ae75e4db", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "2a4d47c4-10a4-4c7f-8464-6c18d7d54ca7", "comment": "Malware payload (Gafgyt)", "value": "6706d418fc5d93bb87007fc500775335691064abcd69c1dad48cc9e1afd7548c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "387d720a-104c-4fa5-bce0-af2874ba1901", "value": "T1BFE32A3B2B230D63C084547212E32331AAB6DF6A28FA53D7E9917CA86F359443576F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "064e57cb-1855-4d81-9a81-13a9504aa8bf", "value": "3072:u1YaHLP1oPYj1luutJ8adPF4KQThsdgx95t0Fb6mn0PGngYek:ypHp4Y2utJ8adPF4fAgb0Fb6mn0engY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "c1d6fb05-c801-457a-b50f-66ab3f8ccad6", "value": 153210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "6bb33e3e-092b-4042-8556-4cbf7fb6af0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f37ad62-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "d4dfb2c4-b1b9-4a54-b3a2-4ab4637a80bf", "comment": "Malware payload (Gafgyt)", "value": "cfd64d9315ad7c51f839047d1664476c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "ad18819c-25ef-4ad9-a447-87015edcaf58", "comment": "Malware payload (Gafgyt)", "value": "3190f29d355a28b7edee22e65f44bcfba988b9f54771ba34b2d13515164a927d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "e49f621a-2440-4680-9e28-3c4491a014dd", "value": "T16804B72A3E11ABBEE164C67107F76B70C39529E325D19382E26CFA185F7028D195FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "1d4d1ab2-b5ab-4751-99ea-9886f8fbd34b", "value": "3072:PuMREo5YGPY12iQetJ8add9Qzhsd/CSzadtDDqucwVi+MJk:mMSu9YQetJ8addQY/7zadtDDqucw4+Me", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "f3a42fd0-82c8-40ea-ab85-a7a7f992d8c5", "value": 175917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "b70b843c-1140-4530-8d9c-f7cf2a0d1a2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f38f72b-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "eba54846-2417-4862-ae48-f9d2f49bea34", "comment": "Malware payload (Gafgyt)", "value": "819df43b4e988346b5a4a3bf8f698475", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "8e79112d-aa4c-48e9-92a5-868504c6b054", "comment": "Malware payload (Gafgyt)", "value": "94cab9304474a7cb096a2dc91744d562bed82433a4c82be0536bcb46c256cf40", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "6ecaad0a-4d11-4f80-9d31-fdc83225251f", "value": "T1CCE32A06F8004667C2D16BB7B39B438D77225F6A9BCB3341D9297DB02FE1B491A3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "7fe52e95-a401-4434-93f3-5cc80edefdf6", "value": "3072:S/HRpT57Y11PAudDA60kw0mgABfvrupBetJ8add9Qzhsq8RzOmcwp5Lw+QdULWvX:ki0d0mg4DupBetJ8addQbKzF5Lw+QdUQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "7285766e-ccd1-4935-9a92-e27f457b0538", "value": 154483, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "4e028073-d6d5-4ead-9655-978598bf833f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f3f0c0b-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "559acd5e-b0cf-4b76-a851-1b258b22d832", "comment": "Malware payload (Gafgyt)", "value": "e526b4c10826060de8c28e203192fe47", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "efdd45d4-2362-4c58-838d-903bc078d54d", "comment": "Malware payload (Gafgyt)", "value": "0637b641eeb53e69c022b8c24890098b28755b6fa251919a25aa74f82ae4bd17", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "4ef81db5-c723-4791-a0ec-a4e73d5ebbcd", "value": "T1C2D34A5BA61C0793C45B89F12DB733F09B9AEFB204D621C1E91EBE805B319752226F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "4cc8ce1a-9ea9-4d78-9abf-bd2f8407dd26", "value": "3072:WrVk/zmIxa3pWTuKHQetJ8add9Qzhs3PEFfZsby+nihhgqLk:Wrq/zzxa3QTuFetJ8addQW2fZsby+ni2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "c0542c6d-fe24-4b42-8ada-2308d23914c3", "value": 139023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "7e20896d-189a-4954-b670-40d01f01a058", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f42a108-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "de8bd1b4-a7f6-4bd7-af48-b0851e9f043b", "comment": "Malware payload (Gafgyt)", "value": "9a35678dbc55ff9f1a7fe2415a74c0a1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "3208ab9d-1574-4054-835b-0ca1962b7b50", "comment": "Malware payload (Gafgyt)", "value": "352e1c3b2ebfa0d1c3140fbd957d698f71b89200ba6898123a72728c2e481336", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "5186dd30-d068-44e8-8145-eb6afa699c19", "value": "T1AFD32A0748614EB3C005ADB225A721200B57BE774A9F26DAE92D79E05B7B8CF711EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "ca08eb4a-2311-4247-89d2-0e931cdb9128", "value": "3072:fjtLsW3LsdRHUAetJ8add9QzhsA0UnyL+n5SGBgqWU:fjtD4LUAetJ8addQl0UnyL+n5xBgqWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "78dc46ec-f548-4f88-a045-6c595e4049db", "value": 134264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "c448a6b3-10c6-4f8f-a76b-5228452c6a29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f46d847-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "2cea9972-1084-41de-9f04-c222bf5a93bc", "comment": "Malware payload (Gafgyt)", "value": "be3ae9be9543d62a05af18c9ba0cc27c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "497cad8e-b757-4ca4-a730-808ff9c6aae8", "comment": "Malware payload (Gafgyt)", "value": "6a0a99ff300be41c905234593ed3abb69b8bb5c9c48449612187036d33c367a0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "a5733e7b-44ae-41fb-851f-9b81e23a5738", "value": "T134E35B2B75D18DF5C00285B126DB2394A423FE7B0AB62247B7847C647F3D8D94EA9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "6a1ebe68-9bbb-413d-9023-e845759aaff3", "value": "3072:2DeURnmNKGRUvs4gh5CbsjqutJ8adPF4KQTjsgRN/AijobnTritGmS1jk:bWE4gDaRutJ8adPF4f17jobnTriImS1A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "0da687fb-d42b-42bf-a0eb-422b957405c2", "value": 145735, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "37a5fc0f-d819-419f-ad6e-dc699a069567", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f491fd9-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "01fc7f8c-7406-4176-8e7a-f15f47e8d5bc", "comment": "Malware payload (Gafgyt)", "value": "c43e96e6b6d7389149582f5641315eb8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "4006e96d-1f21-45ab-b4dd-1b894df30f7c", "comment": "Malware payload (Gafgyt)", "value": "810c86165b9b97b45fe988a23542c9b054aae36ad81f1509e63f099aebb600bf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "e58cc42c-302a-4e20-956a-aba6bed24e34", "value": "T149F34B07E4004663C1D22BB6B79B528D77235FB997CB331199247EB02FE1B9E1A3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "bedcdba6-391f-4911-87db-2ec2c8057bea", "value": "3072:6w1Y72jqCcm/TOKsxMRp2a6nraxgjowFetJ8add9Qzhs6Y2Zqix3Lt+4KZqu01mM:2xMRsa+rYwFetJ8addQRY2ZqixgGmy8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "f260d45f-2309-45fc-84e0-caa88b5d242b", "value": 165607, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "4f3de531-8667-40d5-9478-f36a7fa7aae0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f6cb786-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "da155b58-dd40-47fc-87e9-9991587814ec", "comment": "Malware payload (Gafgyt)", "value": "5cfd74b7c4062199177397a3a9e49b59", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "ef5fb1b4-d920-4b58-95c7-7d27f8574e4d", "comment": "Malware payload (Gafgyt)", "value": "40284b65ec9515750764e5204c683dd0177c0ee763224798ad7664f06f464fc1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "9c928da5-08d3-4c3e-a036-099487080bb8", "value": "T13BE32906FC004623C2D16BB7B39B428D77225F695BDB3351E9297DB02FE0B991A3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "89dd957a-2873-4c87-861e-16a219042437", "value": "3072:J/HRpT57Y11cAuaDR60kWHhPIDzzBC4etJ8add9QzhsJCzQp54bJQVWEGoQKak:wq0jHhPWPB7etJ8addQ0Cza54bJQVWHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937686, "uuid": "a511e2e8-e70f-4e3b-b821-36b6769dda93", "value": 146937, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937686, "uuid": "0e22c636-d6b7-4762-a138-f95ae7de2de4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a269f706-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "66a434f6-e4f5-472d-98ee-7978cdc6b574", "comment": "Malware payload (Gafgyt)", "value": "1d929ae8de30069ddb4f285602d8978f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "0e584575-cf85-4849-a8dd-af3aa1567f67", "comment": "Malware payload (Gafgyt)", "value": "8beb1d3622421d2c846b56b18de9b0f9911afdd1478a22a0a76f05601b692bf2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "f4ead334-1973-43fb-ba92-fb38affb2a3e", "value": "T144C34CD7D902C5B3D4020AB2126B724A4622FF3F496B29E6F7193CB4AF319857225F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "67eb1f62-fe69-431a-ac42-f3e4254cca75", "value": "3072:oPrmFC7HQ66abGWZeEuetJ8add9QzTsF5z6FmW4V+rXCGcgplK:ozP9CeeEuetJ8addQEHW4V+rXBcgplK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937745, "uuid": "6420f1cf-4491-4e9b-9800-cfe4f401395b", "value": 125937, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "1a7b11e6-17a3-4d71-b783-9105b8ee4631", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a26d1fad-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "baaab57c-e566-42a0-a24e-5dae5217402b", "comment": "Malware payload (Gafgyt)", "value": "609b85c098d864c629b7e78debc5108d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "7d805e21-48d3-4905-8579-4c7afb0a2de0", "comment": "Malware payload (Gafgyt)", "value": "f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "ab53a40d-c96d-4130-99bf-77171060b9cf", "value": "T18CC33BD79640C5B3D00209B222AB67054623FF3F499BA9E6F7193CB09F309866275F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "d4b6ba30-3a33-46dc-83bc-6decdbb2678c", "value": "3072:N2ZLKMOPOXMjV99bdrdJ1etJ8add9QzTsctQ7zmlw74V+rXCGcgplK:NGh343jRJ1etJ8addQTtQvmu74V+rXBq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937745, "uuid": "74416dc0-7bdb-4674-bcd4-66caa2b9102c", "value": 125713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "724fd1ca-5ca9-4ec6-ab5e-4b4bb1a429b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a291d065-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740937745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "d0520afd-723e-49f9-b72a-b986f246570c", "comment": "Malware payload (Gafgyt)", "value": "24598a94e9cf8b9ede0fec1482a25ed1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "11504a69-0731-4d94-9d9f-0cb1f5c29d31", "comment": "Malware payload (Gafgyt)", "value": "1af158829c1eaab13fd4f10719306e635e2f1bd391cf09129f2a786ae94cf124", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "97196e11-5784-4a37-a4a7-cc5a51087b03", "value": "T10D04D81B6B618EB3D81ECD33029A1201108DD96B55E93BAFF6B4E91CE76694F05E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "900c360e-6204-4988-93af-b692a526d88b", "value": "3072:sCQ9W+9HQ1wsboetJ8add9Qzhs543odtDDqucwVi+MJk:sCN9bboetJ8addQMhdtDDqucw4+MJk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740937745, "uuid": "ca5d2c84-60ef-4e1f-820d-2146acd63f8e", "value": 176029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937745, "uuid": "a6c7a42a-328b-496b-96f7-2c7f28c6b811", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58108d0b-f4a0-11ef-a514-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1740938106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938106, "uuid": "ba3f93d6-7b27-4129-a78b-c0fcdb6685ef", "comment": "Malware payload (Gafgyt)", "value": "ddd2066e9b68c51382870956a3c59979", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938106, "uuid": "c006263f-ddbb-422d-9626-ee2052e98d2c", "comment": "Malware payload (Gafgyt)", "value": "0340ac49b3ffa9b62521f5d0ab751b8b1196e816d644317e7ae7a6166b08eb08", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938106, "uuid": "19a3db76-b4d7-475d-82fa-888aab0a457a", "value": "T15B418F9E62E14970ECB5A65B3669C84175CCB0C634D95FDAA8DE3DF4388EF047401B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938106, "uuid": "fc4eb730-251e-4750-a938-3edd5c9b1e3e", "value": "48:vKafrGK5wFxUquLvpsIKwGGKksqRe4CZsiCB968FpJenJs+G1JpptkntssKOUeEw:v5VN7xZpe7qtBtN1pzktsBeESa9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938106, "uuid": "deef5de4-36ec-4aa6-b0eb-f5c4541243b8", "value": 1988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938106, "uuid": "fea9c59a-0e97-4d06-ac33-cf53bc4432b9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada462cf-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740938193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938193, "uuid": "8787ca2d-7182-4240-b0dd-b2ca7e68a211", "comment": "Malware payload", "value": "c92fed179303f2dfaa7c41596801e19b", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938193, "uuid": "ea40aece-2bfd-45bb-9e15-b696735a60ef", "comment": "Malware payload", "value": "35ef377a554f8cc1063c35deddddda441fd321cd4b76bfd13819fa43b03dc20a", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938193, "uuid": "53880720-5339-4879-8b7e-9a841c8d9107", "value": "T14F44A8796514E453C8A12DBFF3D8B2347116772F86E5DA82023DF64C1FA8421FA19A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938193, "uuid": "b6ffd904-82a1-4e91-ac16-a56248b725ac", "value": "1536:zFnBTnXp6YFs/tUNetonYWvLpZn+EPMPSP3pLliIInw7c4x3U9Ecw6CQLzCcV5SO:zFnBTXcgs/tYe2z+pbeQHC35A+pb7Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938193, "uuid": "ced8f311-dbf2-4791-b91d-1d2354d4d73d", "value": 269184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938193, "uuid": "54e8496e-a984-47d6-bf62-9cc9edd5d560", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e409fad5-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938285, "uuid": "28bf7501-955a-48a6-a3d5-a8f8dd52c1d2", "comment": "Malware payload (Mirai)", "value": "52fef599fc35310b92fc75eb58efdf58", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938285, "uuid": "2debd669-7371-4910-9acd-8e5fd6a909d5", "comment": "Malware payload (Mirai)", "value": "d90862c8a4757909306fdf9feb3a3d7068bfaaeb9cfd5dfbe81ca9279f036fd3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938285, "uuid": "974ffa79-98f3-4f59-a6b9-d9d27444108f", "value": "T159E329C7F800DEFAF80AE33648570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938285, "uuid": "84eb7388-174f-4c5f-ad54-486731bab3eb", "value": "3072:GmzTDH86JG78FenJljAX0Gidw+w9EEVvjbiQLZrEyqKY1f:G2TDH86JOHjAX03dC9EMLmyql1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938285, "uuid": "23a747f0-ec52-482c-ab23-faff85161610", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938285, "uuid": "78504b77-f55c-4f58-8c85-12fe3fa27cca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4b1dbfa-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "b8de8f49-14af-4b34-9ff0-121b5b414fcb", "comment": "Malware payload (Mirai)", "value": "20ad3125761e9bf8489889bd9f1b37e5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "c2b6b0f1-dcb2-46c9-8cf8-902ade9c1700", "comment": "Malware payload (Mirai)", "value": "011eb52c17971634567d64854824f0ff4465845af3d2a73397584de9cc27c40f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "5d2e63d4-7ff3-4568-a9e4-966cb6245671", "value": "T170042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "34b8e6f8-3aa0-4c95-bc05-d2eccf488a30", "value": "3072:OLe6vhWZQIvuCeeuaMuTuRez43IVILRZQy38YhTfYo+M/RgDlplLn:ee6vhtIv1ruaMuTuReErLR738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938286, "uuid": "f9fbcbba-b54d-4ae9-8a1f-f679f2375ab7", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "7eba0578-cf5b-4c60-ba4c-d051926b5af5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4b4db73-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "a40d7fdb-2a64-4cf3-b9c5-5441b4a183f5", "comment": "Malware payload (Mirai)", "value": "4f232eff14af79bc45ea2e4ab64460d1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "17b1c8d2-591b-4741-8da2-9add1cb30d16", "comment": "Malware payload (Mirai)", "value": "4c5267db20901e8fdb16a4a7a4112f18cce34d01ac70a6a9c968a5f5a8106ff7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "9f50cc63-9105-454d-95ec-73ca7abc2035", "value": "T11FD35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "71c630aa-811f-427e-b9b3-431bfaf3340b", "value": "3072:79eSuygEPjt6qkWqMdKmDnYMb0gBd/gQyVGsdqml6maj:79eSuygEPjt6qkWqreH2lama", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938286, "uuid": "d386443d-cdf2-43a8-a62f-82bd65e96e9e", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "0176069c-c5d6-4803-be79-e51dc8218be1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c04f5e-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "e40bb320-5ae8-4ffd-bde8-4ed9beafd38d", "comment": "Malware payload (Mirai)", "value": "7784edd87eb3d8fef0e2bad44bac6dff", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "37d1c381-e0ca-4a20-8dfa-419e2b5b66c0", "comment": "Malware payload (Mirai)", "value": "ada90918315113432826b4bbf965f4af0992e108ffbe64cfd899c36aeb9f6d38", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "4a2d2e66-501c-4c00-b01d-354885286f45", "value": "T1B7E30B46F8814B12D5D111BAFE1E528E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "79a5e639-ffe4-4fcb-8231-47a90b68ec01", "value": "3072:DHea4CTDUjnwJIXMb6kzz5aTHACdYV8P4eL8:zePCTDQ6IXu7zdaM38P4eL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938286, "uuid": "24acd05a-b997-4170-be04-4f453e667945", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938286, "uuid": "3dac7702-69ff-4703-8ada-a03842c32887", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e53f6e7e-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "07a53e28-ab76-42ea-9342-494bd867235d", "comment": "Malware payload (Mirai)", "value": "e5349dac96f86e10a13c8b81ef3fb147", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "69e02b84-72b4-460c-96bc-28f072bf2ec3", "comment": "Malware payload (Mirai)", "value": "53a3699b473855914a401cb3381f46106171331e84299d823d58030532d111af", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "f2430c0b-e954-451c-b575-1034b74792ad", "value": "T1CEB35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "bc3fb124-088d-45b4-8079-c78324d623a9", "value": "1536:OTW/VCxsHZusN2Li62C87mKjR5fvPVWARouW8j3W+gJH7D:OytCxsNx62NVjzVWxuWM3by3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "e74b1d78-155d-4a1a-ac25-15c18b134ef2", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "ae97539f-6cff-4a0e-8196-c0bb65a52047", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5647fc7-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "cb9af941-e138-4f50-b232-93454a87e476", "comment": "Malware payload (Mirai)", "value": "75355a60e82092bae06cc2196924eef1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "29f25007-3bee-4cde-ac2a-08105149a9c8", "comment": "Malware payload (Mirai)", "value": "7c02437ec0c8033b3d35a31d7b4b65220d589bd2b69d33d21de586ac29f8dd92", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "7952adff-63bc-409f-a805-2753ce1d0ac2", "value": "T17B937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "912a18ee-9b3a-4c59-b22a-add4878a1180", "value": "1536:W/QCZaxGdvts3i5JPhoRsxPu++4HRsUIKqI4FrS4LS9:WYCZa8dvm3oJPhssxP5lR+KfUmD9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "c5f8d69c-c9af-4516-8383-b9d8aa9f6f29", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "55c6edf6-113f-4fb6-9e60-aacc307c7aac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e569b49e-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "32b93d9e-d0ea-42d9-a644-473fc0c74f80", "comment": "Malware payload (Mirai)", "value": "c7d0d7f77889be24f1d3b63b439c3e54", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "662eb6e9-c332-4cd9-b6f2-1bc1ecd4bd68", "comment": "Malware payload (Mirai)", "value": "8c8765859a8630aa6368a0588a583e06243bf2ac9f6b11a3466704777e80be39", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "467f2498-a6b2-4a97-99a3-2925e2da752a", "value": "T14ED30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "baec4d12-1ad6-43a7-81f2-db36e3db9de5", "value": "1536:UFKdzElm18uZJNb4AdFa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYTS:UFKp50yU8e947Lb71izSftBdRalK3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "b1f6303d-850b-4b76-82a7-6ed500ee18be", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "7b2ddd5b-a121-4515-a421-62d6ba2036ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e56a9486-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "4a5c8b2c-9f62-4276-8cfa-b607e615ce78", "comment": "Malware payload (Mirai)", "value": "d799af605c68e4aa8aa72742a0860af5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "2860f341-d6c9-4d73-8084-e5aab58a82f7", "comment": "Malware payload (Mirai)", "value": "dd717fef57eecfc1113a1aa78364021be4cc1dd5bc568fb9ddb88a094b0e57f1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "7e2aaad3-91d8-4c1f-8439-239d94d0d141", "value": "T15904881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "0a75a097-a4e1-44e1-8fe3-e6d5f4c31296", "value": "3072:jg57Rj7LHZwbq1YSBan1yvbysxr1uGS+I:jglRj7LHZ0Bqyy1BS+I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "07156340-f519-45bb-b308-9a859f517c42", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "518b589e-1142-47b6-a4e6-36f2c905ed05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e58a7a0d-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "149c37a3-0df6-41d8-a65e-828198d7faa7", "comment": "Malware payload (Mirai)", "value": "d5de44ba39656bb8907fd6c5b25fa216", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "43a4c3d0-b4a3-454b-823b-1272982ff0da", "comment": "Malware payload (Mirai)", "value": "2fbfbe8f669ddc1ee5443012b5dfa5bdcca775ecae0bd7fe9287536f508c7bb6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "52e0d6eb-3f22-4fd7-9d8c-2e0d40419f77", "value": "T197D32A06730C0A47D2632EB03A3F67D197AF9AC121E4F640355FAB8A95B1E335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "396e2ef2-b3e8-4243-ab5a-20a2a5e781b2", "value": "1536:troGHNTUZNHlIBUiCxfytmtewMDNna/w4o7lbEJvAhh3rp+JuQfqAg87a3p:3mWUiCxttqCwZ7lLhrI+3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "e1ff2921-0bf3-4cd0-a9d5-d481c58eed29", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "6c0b4dc5-a460-4506-8e17-d927d261fc8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e58ac6b4-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "50aaf8b7-dfa1-4cd1-8b82-8819d254ad21", "comment": "Malware payload (Mirai)", "value": "1102a5742738906b77686f6841c264d6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "ae2ea905-05f6-4d27-9f29-80da46784728", "comment": "Malware payload (Mirai)", "value": "a243ce7ee33e512e943cdf8dd2ef6eac63db763552cfccd10f564080db9afa11", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "a4af6938-78de-4177-ac37-4f8d24fe54eb", "value": "T1E904B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "4d77677d-92a9-4bee-84e2-31fe70743c14", "value": "3072:nKpzGeeNkSfcQqmav8SqaRVlnYz65kVt:nKYeeNYQqmeqavlg65k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "3a6c12f4-ccec-49b9-bb89-fce8c0a1fed8", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "3a33f0fa-57ff-4bcc-9fa2-c90d559ac4e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e58c99f1-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1740938287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "ddaf82f5-8859-4cee-83ba-03769ee8c93a", "comment": "Malware payload (Mirai)", "value": "67a35c876dd644a70eea29f6c2492c92", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "efe0277a-63ca-4567-8387-397643d882f2", "comment": "Malware payload (Mirai)", "value": "2a9ae2daddc3b7be6eace1c026b39616bfa3970cdf2caa715c9264df70a59251", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "f32fae18-629b-4649-a191-4a4d1360cefe", "value": "T115C31B45FC405B23C6D612BBFB5E428D3B2A17E8D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "c46a37a3-e3bd-41b2-b7fb-9185468a1e21", "value": "1536:p/Ka0rG5yC/cMChygtiOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQb:ZKaprMh7sOXWFh4UXcYFkWpZlvWNUm3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740938287, "uuid": "ca03eba7-a640-4ca5-8af7-3f46d5f10945", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938287, "uuid": "de51fb6a-0dc2-448a-b5dc-77d6fdd66b5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "140baae9-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1740943519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943519, "uuid": "8c05ba9c-aeb4-475a-bf32-9322d735fb14", "comment": "Malware payload (Healer)", "value": "d59b665aa4aaadbb7ec9ca8f23064464", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943519, "uuid": "39706b71-7473-4c69-8274-2232a5b9bac3", "comment": "Malware payload (Healer)", "value": "920e7297cf29fc71bf9717bb513af4d49b6ebebed60580ec93f70f0b327e8bd5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943519, "uuid": "99c2f3c1-cc02-42d3-9567-67c93ebd3836", "value": "T1FF853363E8DF1BEACDFE3875649B05443E1BCB3CD3219E0665C06876F92690A36B54", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943519, "uuid": "25ea992b-f647-4a36-a400-074efcbbd782", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943519, "uuid": "e90df848-4c36-41ef-970b-01a0c941ffe5", "value": "49152:orxrQRSI8a7II7DqOBsR7wVuvcFfRUvg5t:gaR58a7X6OBKFceg/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740943519, "uuid": "f382d36d-9172-47bd-8f02-46493fd304e8", "value": 1802752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943519, "uuid": "f079a5c1-f1aa-4e0b-a216-8d5e55f6ab39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "763288d0-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740943684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943684, "uuid": "ac1d6a7a-4086-41f2-a742-aa97ed6d8542", "comment": "Malware payload", "value": "2e0be4c0178a2206e41f345ab22307e7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943684, "uuid": "245ddb55-599d-44be-881d-18ac6be4f950", "comment": "Malware payload", "value": "c3baf1eaa63000020bdae8ecec6636b79adaefa6b290480d94959b54666f1ca7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943684, "uuid": "817a471f-4d6d-47ec-b7e7-1550081bb5a7", "value": "T1D852412A9E5102116437D3B9AB13D308FB31405B9381566A3AED92114FF6D86E6F3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943684, "uuid": "8a025ae8-f9b1-4da0-b551-7e5dc79aca9f", "value": "192:0U2iOmZmD3+OfFA20tsnnUstA9kRvqPt5BZmHoBi5s5Ti5ld4Uy:0xhu+vS2HoBi5s5Tiyt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740943684, "uuid": "daa67b54-b8eb-4742-a17f-dae0e779ff0d", "value": 13795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943684, "uuid": "c7a0cd24-5f4c-47e9-8592-7ec76733b23b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740944171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944171, "uuid": "30759d19-08a8-4895-b2ee-a278023812ef", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944171, "uuid": "65a9428f-dad4-453d-a8f3-c9613bf2b3f6", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944171, "uuid": "b23e3499-2753-4e4e-9cfb-d04313a85f57", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944171, "uuid": "1e3a5e81-fc57-4d84-b74d-6c9206499978", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740944171, "uuid": "e0e70b73-7540-45cc-8d15-2722f2a9f77d", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7da6fdc2-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740944555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944555, "uuid": "47d806bd-1e96-427e-9cfe-d8b041a3d66c", "comment": "Malware payload", "value": "9b67e0cf07c030e11c287887b4a896f6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944555, "uuid": "a5d3488e-7ca8-41f1-9ca4-f9d864da71d8", "comment": "Malware payload", "value": "07af33c989167d8528d9e9eaa330eb7e589a18d55d789755c8def88709e25bb2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944555, "uuid": "272c110e-41c6-4d63-846d-b36bb23dd838", "value": "T18EE53BE2650961CBD48E23F59F2FCD4369AD0BB8572144C39C58E87E7D72CC0A5BAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944555, "uuid": "33e44620-e11d-45b6-be43-f340e690ac29", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944555, "uuid": "d91ce124-4be9-497a-9226-23f0ec401529", "value": "49152:LG20nan+hxpx7Rmm4Yvw1vqrhh1Hoq/27w:Kla+hxpxAt/1Srhh1xD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740944555, "uuid": "00733828-6bc1-475d-bdc8-3051cca63514", "value": 3200000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944555, "uuid": "6f8bac2d-c53b-442f-b864-8476ee3b3434", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43582b40-f7a0-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740945316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945316, "uuid": "fa2c743a-a073-4443-9cc3-4b68174c78ae", "comment": "Malware payload", "value": "e300270e705313fcb5287600e5d94645", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945316, "uuid": "389839c9-f562-4af4-8757-05e7c2fcb50b", "comment": "Malware payload", "value": "c0bb74316b66e8ec4e6e76eed303303026765b247f8adb2a92cc1650e4f8eb08", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945316, "uuid": "90372f1a-f034-4cf7-97db-95f2e264576b", "value": "T18595232B0C07B56BD15582B7A21A2F3CBB3CD6685F6DE6BB328591F4E3513463408C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945316, "uuid": "bd4e959c-9719-43a7-acf7-d3f9bebc41a7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945316, "uuid": "241c2cd6-78a7-47d2-a25a-e33e5fbdc5aa", "value": "24576:EvXrbmymmozL1JvM6gVhUeV7qgBq96q9+B/ZLlMfUzwH5RE3bZdzStczjQuvwm0d:Qv6VX3k6SeeV2E4cxMcORErZBSa3QH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740945316, "uuid": "4065f220-eb63-4d4a-9ec1-6fa081dbbd17", "value": 1911808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945316, "uuid": "703f9ee0-dd18-44c8-8bb0-a9f65d8b7400", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67bead96-f7a2-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946236, "uuid": "9eddf268-437b-42f7-803b-03f5c80d282d", "comment": "Malware payload", "value": "eef0258b54f195785356cfdc503c7cef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946236, "uuid": "6d33d6a2-3558-40c5-ae4e-f8402e2b12f1", "comment": "Malware payload", "value": "16966495fa49dfb8f206f409557640d130d3ea19b2daae4662bbbc23dc4ca3d6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946236, "uuid": "e00b2aa8-2434-415a-9b6b-7f8b082c47c9", "value": "T10D0633AADD7EA235C8843736EB5D87FF60983E2FA016596D0F95B65108DD322301BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946236, "uuid": "798f0858-83dc-4c64-9966-0e11357446c4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946236, "uuid": "882ff77c-07dc-4566-8ec0-b6ea7d37f6d7", "value": "98304:femxPidzZ+eCUmT4nzQp9j4Kn81vl54mKiw8ADKLC9:femoD+eCEnzQpiK81vGd8IKu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946236, "uuid": "833400e2-182c-435d-bff9-7719400a10af", "value": 3942400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946236, "uuid": "bf67667c-ad85-4fb5-8c89-151dc86adec5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd4e7240-f7a2-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946434, "uuid": "d8891752-a03f-4a20-95b6-54cde1c1af55", "comment": "Malware payload", "value": "abf013e28c1d5f25bea06baa2a6fe5ee", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946434, "uuid": "ad7b68e8-6854-40af-81df-93c12f850999", "comment": "Malware payload", "value": "655e50ec447e31159af437dbe55ed9ed6c1f88413ef36413aa6eab1ef4bfca76", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946434, "uuid": "86bb0280-11f4-431f-ae6a-f6ffe827bf15", "value": "T1D253F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946434, "uuid": "51602d27-10a8-489e-b31b-a8c17cb1e7b3", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dIwR1X1t1RB1p+dX2sAz:aA1fho1P6n2SwR1X1t1RB1p+dG1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946434, "uuid": "4c6810d5-6ad6-44f4-9d21-1c15938ae8e9", "value": 64433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946434, "uuid": "bef203cc-faab-4177-8126-46a8b1ef1822", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f630ee5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946625, "uuid": "752b7a23-c3c7-4b82-bfdd-195632e46898", "comment": "Malware payload", "value": "5544437de8d8c2a35795d21856f0e184", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946625, "uuid": "472e79f9-98fb-42f8-b2c5-a193bd7771d2", "comment": "Malware payload", "value": "01db3cb58054711164d01da10f46f37aa079b1b36c2519f5f605b3e457186391", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "69b283e2-eefe-4d1d-b616-d207f32eb929", "value": "T1438297137F1601267277D39E6533E708F53284279241817E3AFC82227BE6D5597A3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "161fd426-08db-4288-a6bf-2704e04c2ce6", "value": "384:uV1AVuJUU9I2FodmqOtPBimBy7i7skio6cdQ3Xt:uVaVuJDSwtPBimBgZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946625, "uuid": "6bfadb1e-fada-4ca7-9d4e-6a4d559f54f8", "value": 18823, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4cb4af39-bd58-40f9-9d7c-0c4fde84e009", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f907e36-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946625, "uuid": "0851d5e5-0d67-4516-879f-878a08676488", "comment": "Malware payload", "value": "f03c5a8c5fc9e844581727f6b9da2d69", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946625, "uuid": "16939fc0-cd53-48cd-bc0a-19e5c2971d41", "comment": "Malware payload", "value": "135003ce160af3b9d05ca38e5d39ec49063b03b832580dc11a968528d54d671a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "3d2144b4-338a-49c8-8bcc-371a46bf3a21", "value": "T1015231269E5102119477D3B9AB13D308FB31405B9381526E3AED92114FF6D86E6F3E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "21293bb0-8c0f-4ae3-9cf6-8b81793b1b90", "value": "192:0U2iOmZmD3+OfFA20tsnnUstA9kRvqPt5BZmHoBi5s5Ti5lduU3:0xhu+vS2HoBi5s5TioA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946625, "uuid": "5b9307c7-3cf3-48f3-b081-cb7f7dc5945e", "value": 13744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "a1f53972-19d7-42d4-9ccd-489e486e4025", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "520d773f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "086a5b70-e1dd-42e5-ace9-2ab5293bd7e2", "comment": "Malware payload", "value": "89c0ce995889ccdd7086a7283c08c198", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "fbf7e832-5251-4534-bc11-4a41162ace81", "comment": "Malware payload", "value": "d839dd01c7f70710e6b9df6ed6cf283bf2c316ad8e96fbcde1739a8dd57c8e7a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "a1904c2f-4d1b-471d-a7c2-1f3f99f87391", "value": "T143524F5B5EF302616867D27A279BD304323180479682CD2D3BDD9204CFD6DD6A6E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "35dcf22c-0f2a-4084-b09b-e883a269cc60", "value": "192:AOn7BGIhD0qRHrA5iFHUF0isWiaJT05SExT/0NpupQtuji3saJio7:F9F0FSx6pmQtuji3saJio7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946630, "uuid": "1d75f0fd-4a0a-4824-b1d6-6436487ad8e0", "value": 13282, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "653c5c2f-0379-47bb-87de-b7c143227c62", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5220e9fd-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "a29ea0da-b309-4b41-a5bc-2ae8f52fb2c4", "comment": "Malware payload", "value": "6c98814844de533309dba2c96bafe5ac", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "8c192ba0-f32a-4cf9-89b1-598c349b1921", "comment": "Malware payload", "value": "f8d3d98cf1a422750ad536bc965e28034ff189ed938d2f5f7e2ff81e2a21b2bb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "70cc15f7-41ec-4b17-b267-48fb6d228e01", "value": "T198829723BF1601257277D39E6533E708F93284279241417E3AFC82227BE6D5597A3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "d1c407c9-befb-4b2c-9e38-e715cb943c1c", "value": "384:MV1AyuqUU9I2FodmqRBimBy7i7ssio6cdQ3XBx:MVayuqDSbBimB2Fx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946630, "uuid": "26f3fc10-53a1-4892-8683-ca627d04cd3c", "value": 17915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "f11cb420-ea9d-4af7-a43f-096332104600", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5235f491-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "5d287bdf-867d-4d02-8008-878c92d5ec2d", "comment": "Malware payload", "value": "7069c0afeaa0d0684c1aaa64bbaff4ec", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "5beb4d50-0a67-4c4e-a63f-02b38a5a2489", "comment": "Malware payload", "value": "5a5e48348abfacf7c1911fecc81dc57e87b1928b7b4d71cb6d35f77109b2cf8b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "b757cae6-19a6-430e-bcef-959eabd5ed95", "value": "T1C48297137F1601267277D39A6533D708F53284279241817E3AFC82227BE6D5597A3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "be238032-8b5b-4ca7-8983-f503e0b3d3c1", "value": "384:uV1AVuJUU9I2FodmqOtPBimBy7i7sxio6cdQ3Xt:uVaVuJDSwtPBimBzZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946630, "uuid": "bf2b1998-a7ae-45ef-9438-69867666b56c", "value": 18822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "ac327c52-b70c-4e8d-8124-2feebdbc3b3b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55d98dfe-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "d73fcf23-3e43-464f-92c5-5efce664d555", "comment": "Malware payload", "value": "35ff838b1d08e909d20c7b7ca36b1262", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "69db9ff6-9121-4563-b3a1-be5b86e806cf", "comment": "Malware payload", "value": "5309d797853b98c52f1f739cf77a26f5cfbc16f3eccb0a9279f04e635125c98d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "ea02c9c0-163d-4800-b226-fcc42bb10ca2", "value": "T16162302A9E5002515937D37EAB139208FB3250579381852A3BDD82118FF6D96E2E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "1801774d-eecf-4740-b5b3-46a6fe4d7023", "value": "192:7d9na1/bpmULiTjt6/Vu9SDMRvqFmKt5BZmHoBi5s5baiZbd26l:MtKE2vi2HoBi5s5baiuI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946636, "uuid": "e8051686-6349-41b5-b222-dbc72bcbe378", "value": 14707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "6a74ff0b-79e3-49b2-a5ba-770c95924e9b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba204409-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946804, "uuid": "b86bf3c4-beb2-4dda-b82c-ca6e727ce83a", "comment": "Malware payload", "value": "14781f3f2e0c5ee7e82dd90553fdfc56", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946804, "uuid": "3e54b417-5eb8-4ed8-898a-3f4c3e4e99c6", "comment": "Malware payload", "value": "96cdddf90916214f2b9d63dbcb7b6274e0ff7ed4a3ee68790de12f3daf42181a", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946804, "uuid": "0cee2a1d-4ee0-4d77-a58d-148830c1021b", "value": "T1285110112BEE0329F3F38C7A4476960AA537B982FD60DA4C0160514C0862B00EC34F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946804, "uuid": "d610888e-a0e7-4e69-bffe-b32948d47d49", "value": "48:8D8z+k/5wacyZnt0YMB2dyRiXuH87asGL:8fk1c6+BCuc7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946804, "uuid": "12b0abbf-ad2f-4816-b701-fed5adca5062", "value": 3043, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946804, "uuid": "41cd7a56-24bb-44a5-9670-7db330a0e958", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bafd2066-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946806, "uuid": "5ad3db32-323f-4d43-93e8-1e11ee3c0a89", "comment": "Malware payload", "value": "d95b90e260178d1ff7eb3431bb2e3816", "object_relation": "md5", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946806, "uuid": "bd138620-2e3c-4b50-88b5-be453a1a8549", "comment": "Malware payload", "value": "b6eb6ae6b60aea91f7113e75d38a2e7edd258fa47780a181321847bfb0c6696a", "object_relation": "sha256", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946806, "uuid": "9c4c5a20-bab9-40ca-af77-db3fc6c0ffa8", "value": "T16A9502C13784C127E95709354EABD799971DFCA0AE30B08B7760BB5E5B3AAC39E253", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946806, "uuid": "267d7590-afb0-43b4-82e6-67afb0f68bf5", "value": "12288:ytVRQ+gjpjegDro8p1IbGRy6ZDEcf++lvnKS5xBx4T8AQCD+liK8PSW7D7+B4cKU:yt9cpVDhprDnf+4nKg2T816xSWn7+G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946806, "uuid": "76d74ecb-a02f-4e66-a71a-f467da2bb911", "value": 1888256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946806, "uuid": "b1e20e29-1e1b-4d45-aff7-9db3a4a49418", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff5bb81c-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946920, "uuid": "865c73be-831a-4922-b91d-f275f4e05744", "comment": "Malware payload", "value": "b6546bccdc8ce5ead29148ef310d6a95", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946920, "uuid": "151afc48-60d7-4291-b0ef-ae5b7ef31515", "comment": "Malware payload", "value": "a4b642cf288643d82817611d8f15e9387514ab4ef2a2b619d54fe16ca094f141", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946920, "uuid": "75eca487-0768-4c2d-8a7f-f12f6c32b59a", "value": "T1BD52526B5EB302616877D17E6787D3043231904B9581CD2A3BDC9204CFD6DD2A6E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946920, "uuid": "098b13ae-deed-4f21-8320-7c7eb3b6299d", "value": "192:uekLxGLBTUqRg7QpSFp0F0SZN9ga4d4PEd5+JwdODinsThiyN3A:NEFiFKdB5mwdODinsThiyW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946920, "uuid": "0de53424-539a-4153-8985-6480440b402a", "value": 13287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946920, "uuid": "1b195de4-f9d4-4726-a4aa-433e5aaae200", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e8bc40-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "561d8af7-2410-4804-8e40-e051a066bc63", "comment": "Malware payload", "value": "384247412e08b8161728baab992fb6e5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "77933ba1-ff2e-47eb-9497-7a5f0f36142e", "comment": "Malware payload", "value": "603a391463132630fa9d362e6d557242ba5b6530c2f3b88ebc73c2c732063080", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "58d38dfe-a893-44b0-9945-5bc3b6a57669", "value": "T1DF62502B9E650211553BD37AAB13D308FB32405B9781456A3BDC82124FF6D95A2E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "4a359fe6-2ca3-456e-bd76-40c3b0351823", "value": "192:0wQnB21/vpmUI8PR0j9FLFsZ9Ji4RvqFmKt5BZmHoBi5soaiZbd/:FVdJiqvi2HoBi5soaiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946925, "uuid": "7f04b7e3-76ec-465a-abb7-f48e12c48a44", "value": 14844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "bf6ff203-6a54-4b96-9803-bab8ac33a3a8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021d4495-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "06ab3b78-35d6-4085-912f-d90567619d0d", "comment": "Malware payload", "value": "3ee4047ec8494b154c963beaac226693", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "9fc2ae96-3f4f-443a-8ffa-29655956f601", "comment": "Malware payload", "value": "589746df5d704afa43c0efc28eb97e7f5c57c2c00eea817e67d7c764afed5d8a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "392d473e-0c0b-4d09-8f3b-90b1950d630a", "value": "T12452716B5EB70161696BD17A679BD3043230904B9581CD2A3BDC8204CFD6DD2A6E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "2bf4867d-ae36-496d-b04a-225b829f75fd", "value": "192:bC+MFzGce/+r6xGLBTUqRq+Q1jQpSFp0F0SZ49ga4E4ifsPEd5+JwdODinsT+iMC:KF6ua5FiFRE4iV5mwdODinsT+iMC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946925, "uuid": "0b290513-b455-4f07-8dfe-5b34e00dc944", "value": 14451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "f6ad5d62-c68d-43ad-9b61-f31fe330f8df", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0224fbe1-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "bc592a09-ac56-4f92-9470-a0916a7b64fe", "comment": "Malware payload", "value": "e468290797a6c7a6a2f39e104997c0d0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "0d1d9ddf-ed55-45bf-bc5d-b2853ffa2755", "comment": "Malware payload", "value": "ff6fdb1e78ccbd5c24c5fe207f91d5893beb0c2eaba4f717022923c004687e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "e70b9b60-da0d-43b1-96d8-e5dac7420b60", "value": "T1F992B7366E540132097BE37E6303D208F6324067A7828A293EEC55158FF6D9696B3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "e2521d41-11ee-4bc3-8e6a-569e2b6c390d", "value": "384:NV1A6HjwVw2FEHCOt2RiRsBiy0FQ8gqQV0CMF:NVa6HjwVdFEHCOh3l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946925, "uuid": "b0cbda44-99e2-4313-9d8f-c254a6ade6d1", "value": 20658, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "729e3249-c957-49a8-9408-01cdea13d388", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02273a0f-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "69f66936-f065-4b98-9613-c2872b86009c", "comment": "Malware payload", "value": "04976ea3ad42658e72be52481e4c1645", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "9944355e-55bd-4d11-98e9-ac9b745a6dde", "comment": "Malware payload", "value": "62e16d0f1dccc2afc5395464a9dba19cf3d5cf5b009968ea18ab1d8f44bce085", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "e817b500-c6a0-4dff-a403-a2e89fdf6d4b", "value": "T10F92B7366E540132097BE37E6303D208F6324067A7828A293EEC55158FF6D9696B3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "602a1b28-9566-4542-b1f0-6367ff768e0b", "value": "384:NV1A6HjwVw2FEHCOt2RiRsSiy0FQ8gqQV0CMF:NVa6HjwVdFEHCOhyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946925, "uuid": "5dc8f7ef-1650-4cd8-b06d-a86b4798f835", "value": 20657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "51c9a1c0-94eb-475b-bce1-b3522a4c4ec9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "023564d8-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "10875b0f-c147-41ba-9e88-d317fb8112cb", "comment": "Malware payload", "value": "b71948708515f3af3284654f5f0aab48", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "d0492504-bc30-415f-a85f-c38d53becbd7", "comment": "Malware payload", "value": "726e37e4fc86e5fcd92aaa9a9ed3b05770274f865678fc5d9255bf1d8718e9f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "a6d78806-ca42-4047-8291-bea45587b472", "value": "T1BE52716B5EF70161696BD17A679BD3043230904B9681CD293BDC82048FD6DD2A6E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "3e34bf91-3b2c-4281-ab7a-0f82bb110641", "value": "192:bC+MFzGce/+r6xGLBTUqRq+Q1jQpSFp0F0SZ49ga4E4ifsPEd5+JwdODinsT+ibX:KF6ua5FiFRE4iV5mwdODinsT+ibX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946925, "uuid": "92b187e1-6864-4fa3-940e-d58f69d467a8", "value": 14363, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "6eeeed1c-347b-41ca-b381-544e4b5a3fac", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "024605a2-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "e2bbd567-ed70-4b80-b297-3799a132b6bd", "comment": "Malware payload", "value": "d09c51b7e67c8c74cba84d2081e6e259", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "277ab2d9-306d-41af-9264-69626296cbc1", "comment": "Malware payload", "value": "d8475c7cb21519fd591d2d129a7141786dd436b34afc6616c3cdab197d08cdd9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "2c0abfd5-5d7f-4d47-b9e5-1a6a415af0c1", "value": "T1E652616B5EB70161696BD17A679BD3043230904B9581CD293BDC8204CFD6DD2A6E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "5679291f-3b69-4b3b-9259-aa0c4b885911", "value": "192:bC+MFzGce/+r6xGLBTUqRq+Q1jQpSFp0F0SZ49ga4E4ifsPEd5+JwdODinsT+iMa:KF6ua5FiFRE4iV5mwdODinsT+iMiL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946925, "uuid": "f1d9b996-db5f-45d5-92d3-a6f9a4d6f00c", "value": 14451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946925, "uuid": "a6fce496-5603-4e5e-845e-ffa1736e9053", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946984, "uuid": "fb7e9e9c-2ea3-40ce-b3ed-c64eaa61b8fd", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946984, "uuid": "26a4e067-86c4-4613-9a73-bdbe7d037977", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946984, "uuid": "a10f1cdf-f1c7-4488-9551-7d30a6175d51", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946984, "uuid": "f60f8249-6c6b-40c5-8345-81de2de2c62a", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946984, "uuid": "9368c62c-8056-4998-a50f-5a913a6f73aa", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946984, "uuid": "066ee557-f426-49d2-80fc-9a6e255f64fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946984, "uuid": "47b118ca-38f3-4651-8225-3c323c14399b", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "a7aaa436-9b49-46f7-a2e3-947b63868754", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "ac2256f6-e7fa-4643-950f-e100c74d9934", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "f4a1b083-335a-41b5-a8a2-adeb72ef9bb8", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "72dc113e-954c-4ea3-8df5-31bb5b4c2de1", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946985, "uuid": "ccd00f45-5d16-470d-ba1d-7fa74335a482", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "ce21d52f-6e07-4be0-9158-523b93e3c911", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "6223fd0e-0f26-4036-a975-722228021f56", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1740946985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "fb304d48-c30f-4211-b0e1-9c23f7418a23", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "e31697d5-9cd2-48a2-8751-e449fc3347ef", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "78136720-295c-4ca5-9d65-9afeeace05bf", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "2f1c4dd4-109d-4902-8a7b-ca214c379ca1", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740946985, "uuid": "187e409b-3fd5-4f28-a206-88d232a13ed2", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "c9540c54-933d-46e9-aa66-97ae37ed95e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946985, "uuid": "af5709e0-fcb3-4595-90d2-b96b3a594fb7", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "801f6638-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740947136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947136, "uuid": "3a9ab2cb-8b9e-474f-b0ef-0774beef5114", "comment": "Malware payload", "value": "0169aebc25c0391afabf55287dd53c61", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947136, "uuid": "661aadf0-92b9-4a04-8a51-c325a0702807", "comment": "Malware payload", "value": "d6a6a06fbda409e28aa80361a2d56c9c6de67817a45745f5995034a03f0195c1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947136, "uuid": "0eeed7e3-7e14-4d95-8959-fc8860dc90e0", "value": "T1282633CEB53F4A38FA250679EB2DB1E421260C5F1528E1DDBE5099F129DBB223077B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947136, "uuid": "810d891a-39a3-4b0d-8c96-1995ad18b97f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947136, "uuid": "5e7413c6-92e0-4417-ba4e-eac01b98097e", "value": "98304:YhcQ2wdzyRWRfiXlnyu8d+6F+FvOniGdRTPiKVdEr4mE8PLEwS+:Yh3dmYfiXlnyu8gnvNGf5VdrV8Em", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740947136, "uuid": "6cf088cf-989d-4389-9de3-9f9378c61ca7", "value": 4713472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947136, "uuid": "2d7fc055-6090-486d-a5e3-1e23ca72e1e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b2d0c3f-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1740947182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947182, "uuid": "0d63bb3d-5fc2-436f-adf0-2e2aa14c3887", "comment": "Malware payload (CredentialFlusher)", "value": "dbb15227560615aa6e06be368f59657b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947182, "uuid": "b28bcb8e-f442-4aef-bb53-1d033bd39c34", "comment": "Malware payload (CredentialFlusher)", "value": "77910931203530f0c0f757837fcbd698472a14bfc9bd86ef3bf123d2fbfee87c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947182, "uuid": "6b209e31-9f07-4031-9cef-baaef787d67a", "value": "T17E259E0273D1C062FFAB92334F5AF6515BBC69260123A61F13A81DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947182, "uuid": "5baf8ab4-f4ff-4cdb-89ba-44c48f46f7d4", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947182, "uuid": "9e0bef67-cb4d-42e7-98cc-cd7021c1298d", "value": "24576:jqDEvCTbMWu7rQYlBQcBiT6rprG8a2W7L:jTvC/MTQYxsWR7a2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740947182, "uuid": "506c56c8-2c89-49ad-b7b5-b15b1860f2d6", "value": 968192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947182, "uuid": "0f8c40a0-3d8d-49ea-843c-006ed4ba4d92", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbb4c85c-bb98-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1740947532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947532, "uuid": "aba3ed47-56d0-4863-914a-b4efb515cf4f", "comment": "Malware payload", "value": "5fe496db248eb021dbfbd01a0311875e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "trycloudflare", "colour": "#5a6d94", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947532, "uuid": "a7b64c9f-e947-4998-90cb-efb7b5479995", "comment": "Malware payload", "value": "ca72481f563ebd036976fcfebf186f1987803e40dca955592cfe3f91f96e3616", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "trycloudflare", "colour": "#5a6d94", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947532, "uuid": "0c354fc8-8341-4307-bdc9-5911ef6ef9c1", "value": "T1C031F0201BF50319E5B7863964F77326EF37B808EB14595F214412249C62A11ED28B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947532, "uuid": "050df0d0-2087-4e23-a8f6-ba8801b3d4d6", "value": "24:8w7mlc32mDvSwzKctWxyMqJhUWnRdRpoODG1YqVzsisOab/rMTcm:8Ami32gqkJHdPoZBlab4c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740947532, "uuid": "491ea08f-8d01-4847-8866-b9964e11a7a3", "value": 1521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947532, "uuid": "57e7b690-7b01-4263-a1c1-9bb8a81cc3c6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5177292-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740947655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947655, "uuid": "13c22ea1-7a95-4caa-afdf-338958224b49", "comment": "Malware payload", "value": "d9748bcc67bd44492c49a8e7932317d4", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947655, "uuid": "a57151bd-b4b2-4c21-9f43-cf6fdfd0b0c2", "comment": "Malware payload", "value": "0c41db3dc625938a5cb0267bd47d6f81e16d966009a967e13787cc056fb8a2ad", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947655, "uuid": "111a89ca-a842-443d-9c96-c0d9b89b0920", "value": "T11D44B6F899C0F442E97D4778FBACB72C8836783ACD8A7D0613A5D1980EE8691B40D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947655, "uuid": "47920085-a60b-4286-88b3-7d1ea30eaedb", "value": "1536:R0NxPpfKCcB/769/UYSHz+APJGbqh5owenIfTkFL2Z59zRVwd06Q7ITHNN/Flck8:R0NxhCCq/71cDQ7ItNNl/+cRYB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740947655, "uuid": "5f506bf9-ce11-45c4-ad4d-866c06c1c384", "value": 269152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947655, "uuid": "d3f8a6d9-9350-4c13-b803-643337d227e0", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc25d7e3-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740947774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947774, "uuid": "b4d3603d-1829-48a2-94ef-666b17b42a58", "comment": "Malware payload", "value": "8bbecb5ca29ce2443d1fef9315036a50", "object_relation": "md5", "Tag": [ { "name": "pw-poiuytrewq1234", "colour": "#ce2315", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947774, "uuid": "ca31d3d0-09b1-4a29-8dec-b15ddbbcd1d3", "comment": "Malware payload", "value": "63a6d31b4f1c7fe3883cdcf7ab2ddeb1869c3bb1b5a579afa96122b44d95fdc8", "object_relation": "sha256", "Tag": [ { "name": "pw-poiuytrewq1234", "colour": "#ce2315", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947774, "uuid": "0f9fd7dd-852f-43be-a368-6f74fe57227a", "value": "T15658334BF4C87B97669E34AE9DADDA3AF0838B5A2464A21F14CB110F535FC8430935", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947774, "uuid": "f48e0a45-122e-4f6f-a333-310ca6affeb8", "value": "3145728:BCTXMOamzcIs2M6AMhADmjuO3OGtB8OsgsZKF6e+Xj5k:0TXipIstzMhADYDtB8Os9TW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740947774, "uuid": "e43484f1-9896-4503-9c6b-ac587345cdc2", "value": 124595818, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947774, "uuid": "db10f772-bee6-4038-a75c-cc2b3eb52bf4", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aba3da0b-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740948068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948068, "uuid": "2ec17215-d6ee-4b28-aabd-eeac3099f565", "comment": "Malware payload", "value": "72b71c3abe0197e89a3e325540bd8db6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948068, "uuid": "8d652857-5161-4a5e-bf12-8dced3ee1a97", "comment": "Malware payload", "value": "fb4b9b880e27c996c2b6f38a07811ef87b8369a7fc9fe247e35fa7cbfec0b893", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948068, "uuid": "e887fe93-7e5d-4db5-b155-5fa93a341fa9", "value": "T1ABD52AD3F50962CBD89E23F4952BCD82696F47F91B6048C3E868A479BE63CC135B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948068, "uuid": "5b2851d6-603e-4551-9d8d-0791dc51bceb", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948068, "uuid": "1501228f-2d53-4ecb-a92c-d782a0ccf505", "value": "49152:Mov0kx/o+YoGrNCuiUZNqF320aXKTayUUGvmG:Akx/7GrNC1F3UXsNGOG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740948068, "uuid": "2fbb1a7b-c90e-477b-99be-602593526c41", "value": 2962944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948068, "uuid": "bbc7e95c-fd9e-4249-8e88-8c2cd387e74b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80f767de-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740948426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948426, "uuid": "c6fb0e28-bcb8-4995-8277-a09ffbb0be5b", "comment": "Malware payload", "value": "102405d377d3201580fca950dde01bad", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#719F48", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948426, "uuid": "8cfb1ed1-64ac-4967-8160-fb61efa605a4", "comment": "Malware payload", "value": "811b758f1e1107271cdb5297761d935764762225b1b6cce0b3dc67a5c2ba716f", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#719F48", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948426, "uuid": "bcd32081-d12d-4847-acae-3b9bd316da9b", "value": "T182F533E4696850138DCE23729894BBCE97B1AE9388DB5D366D8D10FB015F063782ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948426, "uuid": "2490d5b6-1570-4754-85b2-9b54fd2b6153", "value": "98304:22UuIEWPinaJLLmlzNCS49nXlhvuN7rSpqG:2rXqnuCcHnfY7UqG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740948426, "uuid": "244b2ba1-03d0-43e9-95e4-993c5ba73c1f", "value": 3474390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948426, "uuid": "5ba1d952-78b6-4f6d-8bec-6a5e1b7e3697", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81991bb6-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1740948427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948427, "uuid": "5a618628-7b41-4ffb-8e3b-f9fc512fa85e", "comment": "Malware payload (RustyStealer)", "value": "b93cd5f02a3bf8084dda398a2e57e06f", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948427, "uuid": "780d7d6f-37a1-43d3-bf6d-410dcac79b07", "comment": "Malware payload (RustyStealer)", "value": "4805f60425ac421f28e7df371c33b05a0b7a09ab96fe70dedac72fc9c26c33fb", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948427, "uuid": "38743281-823e-4489-a4d2-964cf95c60e2", "value": "T1AA057C16FA4699ACC05BC07483168672793678CA0B35ADFF12D4A2393E79AF12F3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948427, "uuid": "67d3e311-a6b4-4862-bcf8-64fe69906326", "value": "0312aa8a14fa51afe5f68928bc829f35", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948427, "uuid": "afb5cdaa-3c83-4cb9-a024-2b0f69fe9c34", "value": "12288:g3VxZ4Yg2XyUFqaNhgSdsf4XVe6hON5VQzUYU8VFDY:g3nZ452XyUFqQhns4k6gXywYde", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740948427, "uuid": "22768e05-e5f5-42cc-b597-80b6fe48d887", "value": 802592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948427, "uuid": "bc157fc3-9f7f-47a2-9f2d-ec9ea48620c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cf922f6-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740949144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949144, "uuid": "3bd4a88a-e23b-4c11-b8ea-dea272a94f38", "comment": "Malware payload", "value": "fda017784af59f94a14d6497858d0c0c", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949144, "uuid": "f2719271-c3a2-4d46-b5bf-edd89e8b425f", "comment": "Malware payload", "value": "62c4231a87b11a1606827b449e336c22808c7ae178493fd1d59c7b612eb4321a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949144, "uuid": "36bcc54a-7737-4669-a9fe-7732275fe0c4", "value": "T10E83F8D47E984CDAED09933C74A6E221263CFAF18653D71B953072320E13BE17DEA5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949144, "uuid": "42c0ad8f-e52b-47e4-bccf-5a6a855c14d2", "value": "e843874286eb9ed162767ecd750cf6c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949144, "uuid": "792b9d77-4aa7-42b3-b62c-8b46b71cbc13", "value": "768:kvHju5lekYcJsUsxsTsmy3ykeQCqVRChvB/UwN7EJ82le39ljJFvx9n:UDuLek3Tyaeuh7EjlepFH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740949144, "uuid": "0d9180b9-b4c4-48c8-bf7f-45d35cb9ee52", "value": 85602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949144, "uuid": "98ceff2c-5949-4eb1-a2c7-d4644614ab46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35b82e3f-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740949159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949159, "uuid": "cdd9fdf7-155f-4c62-8622-68d50f3fedef", "comment": "Malware payload", "value": "c34b4b0f2a464eee61fe4609443a8148", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949159, "uuid": "a5060110-74f7-49d8-894f-30a4e09944fe", "comment": "Malware payload", "value": "dda1fb33a76db475df7e58018d107acf637e0ec15f84b6e5597eb9bfef9ef254", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949159, "uuid": "5b831a5a-3d39-44a3-abd9-c45ca709064c", "value": "T1A0E0EB19380B1023DF22CA30E00772326BEB21C22BAC07638A3608127C000C2B6B8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949159, "uuid": "6b15dbec-a30a-4e8d-a8ab-27b24a6fe84b", "value": "6:s81R3KupMF+nm7R3IRFN7DKWRl2vqkTFN7DKSkb4vqIPCtuH1j0KdwUidRqkGWvQ:s81kUM77iNPKnNPKcVj0Kdid5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740949159, "uuid": "0ae05403-23b8-4a8d-94b2-45c53a615e0e", "value": 320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949159, "uuid": "24106783-7167-4124-b0c5-83639d70371e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51c327da-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740949206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949206, "uuid": "19da8230-d0ba-4928-bea5-971d9c6248a8", "comment": "Malware payload", "value": "aa34f746140e284032bd641d40bbad5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949206, "uuid": "0a9fcebf-912e-4f09-822b-19a9d96d3447", "comment": "Malware payload", "value": "2300cad059b813b68a023f1d061c37bc373ba614bb6a113c9643842c3075ece5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949206, "uuid": "f254181c-85e9-4f72-be28-b8d27e3fa504", "value": "T10F26331608226567FFE52B2CBE3BB5A4A5E5E42C71EC93B97751C0B68270ED1AF130", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949206, "uuid": "8ba33297-bb92-4b54-b482-de1d24a0845f", "value": "98304:YdtLmpF67KxBeptxVh+bQsYQqRkyTVjJaqCc5t9UZoCRARc2L2XL+C0l:uNmjBe/xVlsYQSkyZ/YZoCytCp0l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740949206, "uuid": "d6981f1c-1d2c-42c9-b9e0-df06685774fa", "value": 4739356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949206, "uuid": "2eb12896-5d0e-4f80-a514-b2bb8afce5f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "543cdcec-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1740950069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950069, "uuid": "7e1450e5-ef7f-4efb-9fc1-6e54c184f0a9", "comment": "Malware payload (AsyncRAT)", "value": "9daf267f412e5c38116989762a9cf145", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950069, "uuid": "1d699c51-1ecb-497f-9a05-e90730aa85c1", "comment": "Malware payload (AsyncRAT)", "value": "713a9ec5fe2a81686942a159c168027da5910e72fd52d914cf8e6fc0a2cdb0e5", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950069, "uuid": "8a2ff2a3-1a92-4fdd-8f17-9ea0b26ce3e1", "value": "T1258458652CFB517AD63FEA706FEBB6EECA5E923926496D1E40061F074332984CD035", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950069, "uuid": "02dd97a3-c56a-45b4-81a4-1525321685ab", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950069, "uuid": "66846a43-8857-4334-bf7a-9be64f777d70", "value": "12288:TxjwN1WoADQEwTKOZ2+i/qW83wfeuLhDhyO6T1GdcdcgL5i:d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740950069, "uuid": "487c1af4-40f8-44e6-a44f-dfb2861af92c", "value": 403456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950069, "uuid": "836bd2fc-7566-44d5-bf65-84984f533ee8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0a83ffa-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740950224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950224, "uuid": "10ef4a87-3176-4a92-b397-92040ef9671a", "comment": "Malware payload", "value": "d7f9bb91069a0fbf63c39568e21b21b9", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950224, "uuid": "61e8cccf-34a2-41a8-b2bc-8453c7fe53ca", "comment": "Malware payload", "value": "1159609eb5571f0b1538274278477f3cf30f82be3369fcf6006072a7a033bdb1", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950224, "uuid": "d2067489-6a96-4d83-a75b-8844f0c436c8", "value": "T195F04C1B2EA6777305120CA98F2DA2D0F21692CE8552968139D5D5457C133D2D3E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950224, "uuid": "baf12c1a-dc14-4c2f-be2e-acda93e3c77d", "value": "12:QbdCL/sNU6I0M081k77LdrW4H8CkEoxhdiS:yCANAs7tZH83riS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740950224, "uuid": "05115446-fc01-4f6c-9d2f-979b62766f9f", "value": 573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950224, "uuid": "4fbf3321-4923-4f39-8970-67ba121243c8", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2fc7b69-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740950229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950229, "uuid": "6cb23d5a-947d-45d3-95d3-f4b93cbc17d8", "comment": "Malware payload", "value": "fc56a30780f873616933d67c072169d0", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950229, "uuid": "4930f70d-4f58-46a6-ad1e-2dfacf4b2146", "comment": "Malware payload", "value": "069a58a7ed424c5da0fedc7310f757d1080f5baeb731465552518c6fbb3d9d2f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950229, "uuid": "29da4d89-ee3e-4b72-a99a-3dd5c7097aef", "value": "T17EA62332A551703BE7F129B3E460D2303E5DB2142B4889EADAD4EC1C39696D65FF73", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950229, "uuid": "9b088f85-00c6-4bde-9c18-106de2783416", "value": "657e40fb09b2c5e277b865a7cf2b8089", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950229, "uuid": "f7167895-2dc9-4e0a-a824-213d5ccf3ff5", "value": "196608:BlaTU4TwlL/dzS2tAE8G2wuxXV9R05yu8iHb3Af:jaTU0OL/dzUCuxXVc5t73A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740950229, "uuid": "56233823-e53c-48fe-86c3-b89ef60f8ed4", "value": 10082132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950229, "uuid": "a2101d2b-a4fd-47e0-a82d-6bc6cb1c310e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01cac30f-f7ac-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740950360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950360, "uuid": "ccb483dd-a1e5-407d-aa8f-9d8ede50322a", "comment": "Malware payload", "value": "6dd7873b08d850aa0f03148a631cf9ae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950360, "uuid": "e422af66-8f8b-41e4-8330-6d3598a85b3e", "comment": "Malware payload", "value": "88594ec87185da114c2e2994129a03bd17209537c90abbeb0241e0427c04eb0a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950360, "uuid": "711d69f4-1d97-48e2-93a8-c3d7a82ddba8", "value": "T19B9533D7FC038B66CE4525B660E223CBA375F312863FAABD5E6211752C2F543209A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950360, "uuid": "52930b4c-014e-41f5-b924-e99041a6cf18", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950360, "uuid": "f2655cbd-850a-4b36-ac74-062664b5e4f9", "value": "49152:0NHLqSO0kUtrSW99D23iUhs8UctEJVHRz2zqqd:0NHLq+k2x9twtyHRTqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740950360, "uuid": "6ea360b8-dab9-49ee-bcea-21aee81e84e9", "value": 1889792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950360, "uuid": "4e2a8dd7-93b5-4ce7-b4c3-1d4aca169220", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac67e9ae-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1740951005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951005, "uuid": "cf66ecb2-489c-4619-a22f-cdecc404dc33", "comment": "Malware payload", "value": "0b1d0394544997e3a932199f5791ce57", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951005, "uuid": "f40defd3-4715-43b0-9e56-bf4e15213578", "comment": "Malware payload", "value": "ecd4c5dc6a9c328e388a00b873c0e2759c11c17b9f2356bb54c623187c4bb857", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951005, "uuid": "6cf448ac-f2d3-4ded-acdd-ac9f0e87273d", "value": "T1ADD02E222E84E3301ACAC1564D78D040A23015F1004BACB9AADCB2A84BC03F89F33D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951005, "uuid": "7bc520b5-072c-4417-88be-20c794aa45b7", "value": "6:gwkw1S1gNQLh8JbtzBmV5GxFzLgyKBM3S15Lggi01K4vn:gG1LEGnzMixLgyaIS15LQ0Lvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740951005, "uuid": "53f54bff-64f7-4577-acb9-26415bce6427", "value": 273, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951005, "uuid": "5c61984f-dd66-41f3-a9c2-aa3fc48f59ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac8ae8b1-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1740951006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951006, "uuid": "1c58e3f9-9079-4c74-b51b-b244243be02d", "comment": "Malware payload", "value": "719bd119c819ed6b689bfbc8744c2617", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951006, "uuid": "3df99802-a244-40af-9f95-5dc61749757a", "comment": "Malware payload", "value": "48eb77418fc7a41081f98ba6a78761fdbdcd89a3a01fc82ef5681bef45bf7144", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951006, "uuid": "0bd0703a-e6a1-4e39-a79a-da9a58e35a0e", "value": "T165846CD16794C43ECBAA12B2C876FF215D3E6FF81B20C1C75AA0769C5C766DA5834B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951006, "uuid": "0d2661e9-c3ff-44d6-8623-c2e3003cac17", "value": "3072:NspAtO9mXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8E7CgLbSWw:vtO9iRQYpgjpjew5DHyGxcqo8SCp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740951006, "uuid": "5519d617-8aee-4021-bb40-78d7fbd7039c", "value": 376832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951006, "uuid": "2f366ee6-6cdb-4072-8688-b4fa85d0faca", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb0735dd-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740951127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951127, "uuid": "bdf43588-e337-4773-b6dc-5ddd9c74f642", "comment": "Malware payload", "value": "010f0d2eab08dc1bf424091146d61cd4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951127, "uuid": "d49e0760-973e-4810-b7d1-860a7bcdc690", "comment": "Malware payload", "value": "3e7fbea1d7e3a9c6f1bfcfb337ffd98f3801f0050ddbc6ede4bf6c9151dd0f51", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951127, "uuid": "8a8242e8-1ff9-429c-b435-e38454d86021", "value": "T1F6553374B082136F203E9E3EA1F10D6E05D656FD1894EA786E32F63FA34554845ADC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951127, "uuid": "4cacefb2-ff95-4cc4-a4fb-e0621edd5b7a", "value": "24576:WX5LXuBNSwvZX5JGxPGHRKeAzFTOMZ1kkPe5qWlJy39nprzH6e8DSBnKs17JPL:WXxXxKX5JCPGHRKe4TOETQlo3BprbXoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740951127, "uuid": "3e513f84-d55a-4414-8384-a441b3af4c91", "value": 1308653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951127, "uuid": "a4838e8d-a44e-4ac0-8dc6-aff57ab92ce1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292352cd-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740952144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952144, "uuid": "48c678b8-93f6-4ee2-bc4d-353d603ba2a9", "comment": "Malware payload", "value": "9e964c9d47bed0f02f4cf55b858d20b8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952144, "uuid": "50a03374-916c-4c39-af15-49ce26e4545b", "comment": "Malware payload", "value": "5a86948f96c1266f0a267d99203a7a65a169527db653ca3d987267a0c22eab95", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952144, "uuid": "8ee9afc7-5d37-4bba-ab17-ad1abdeb1ee6", "value": "T129E1E026C931FCD4439D3280A7661C5F22A86917C7B39A78D7092CF63E51792EF16A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952144, "uuid": "979f4fee-bab2-4cc6-bfa9-bcd67eee448b", "value": "192:m+n2jh1hqT2MsBxmpVpP3Rty7MwhQajY/F6hd9d:m+n2jh1hscBspVpP33p0Qaj3hd9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740952144, "uuid": "a07b3c41-068d-4f2c-add0-59d333e9ddab", "value": 7259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952144, "uuid": "d08e89a8-894a-40de-9a70-ae1cc4ad7772", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "296f916e-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740952145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "15fc24ca-eb1c-4918-92f4-8d4a47632bca", "comment": "Malware payload", "value": "f1e0c0fff99febabf2e11ac263f14de4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "8821ae18-4fd0-4469-a8c4-948e5214651b", "comment": "Malware payload", "value": "318711ec3f5ab46f92da1eb56c888c94b3e5f89a1f0d25a67e50685cebbe4ffb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "76731cc7-19eb-4abf-afc1-708502792ae4", "value": "T19DA3B503E2A720FEC4A9C2B847CF7232FAB3B45C21345A4E1750CB552F62AB1767D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "939788ff-c418-4d3d-ad3b-6c371ea87e47", "value": "1536:HBUS2f4YxinNfIChZMgIQr08PnFUbADNYMipDZX5RudY:nORinNfI6AQr0IkMipDZnud", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740952145, "uuid": "2e55bdd4-a5f6-433e-a49b-dce64280bed0", "value": 103935, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "cb642788-4c91-48fd-b032-4fab966d0a0a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29843d7e-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware payload (Havoc)", "timestamp": 1740952145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "8c2b3e84-2b5c-476a-b8b9-a8749ccf5515", "comment": "Malware payload (Havoc)", "value": "6182dea29c77472b20789f924d9948cc", "object_relation": "md5", "Tag": [ { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "f39293f1-c693-4c2a-9279-4b95778f44c5", "comment": "Malware payload (Havoc)", "value": "9cfc3e44f6ba9e281c3e141cc71bfc111244a56cb1bed89fa09481cc47eb6b7f", "object_relation": "sha256", "Tag": [ { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "3ee885f2-8300-43dc-8346-38edd9c9d54e", "value": "T1F7A39603E2A720FEC4A9C1B447CF7232FAB3B45C21346A0E5710CB552F62AB1767D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "c4f2f1f0-fca8-486e-a83a-ab00d183ffef", "value": "1536:TkJIalOYktfCM83v6pq9UVE/kGE5+Kb+LwoMSJZNx5FOrdb3:6lITtfCMT2UVE/kOXMSJZDPOrdb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740952145, "uuid": "b1e9dbcd-4ee5-4961-9212-81ad7499c449", "value": 102400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "13df6a7b-8147-4835-a5a5-ed4f71ffb2e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29bd4159-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740952145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "f9476b90-0ff9-49fe-b86a-fbc70e43e9d5", "comment": "Malware payload", "value": "c7310d07d0f7a0fb1f21bd9cce1440d5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "5dc13b12-90db-43fa-b84b-982566b13505", "comment": "Malware payload", "value": "32f0c50e40e67da2b33da897095bf80c8c2c10f8fda89de42102d8f78eb67a6a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "4e00ae02-8647-4c3d-888c-53d5aa3f2843", "value": "T149A3B503E2A720FEC4A9C2B447CF7232FEB3B45C21345A4E1710CB656B62AB1767D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "e62ded99-d4ce-4b5b-a4bc-733c013377c4", "value": "1536:HwUS2f4YxinNfIChZMgIQr08PnFUbADNYMipDZX5RucZ:MORinNfI6AQr0IkMipDZnuc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740952145, "uuid": "681a1a5a-f8d8-473b-bc18-7904ada627a5", "value": 103935, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952145, "uuid": "064bec52-9a08-49e6-ba7a-0f81bf95984e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "389357c7-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740952170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952170, "uuid": "87571bf7-f6a5-4a6c-971a-5ced39403993", "comment": "Malware payload", "value": "55e4e596fae768deb49b10228718a138", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952170, "uuid": "1e5ba821-9fb1-43b8-b03e-12cda988be05", "comment": "Malware payload", "value": "ea7026e23a48f80621313db25f77b733ca6545b74d979889cf1756d49ec03bf4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952170, "uuid": "c4ab80d6-0e74-4b17-9b6c-647b74daa9b5", "value": "T1595633FA9737C8376976E7FC72B884184397623086DE04ADCB9CA5D3457EB79142C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952170, "uuid": "d356e7f7-8509-49a7-b839-b9811cc6899a", "value": "196608:N30jDqDLINkOG4L1wsDZSme8q38rqWWiHm58Z:p0/qDM04CsDET8q3Gwi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740952170, "uuid": "e07365c9-3ddc-4697-a772-5a9951b3190b", "value": 6303448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952170, "uuid": "16421451-e5b8-4b5e-98d2-0aac178885fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a566dbab-1db6-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1740952174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952174, "uuid": "91970dac-b331-4dff-b358-6ca7a27312b6", "comment": "Malware payload", "value": "cf903e4a1629aa0582fd0363b5786676", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952174, "uuid": "8aef1102-9e10-455e-834d-625687c777ea", "comment": "Malware payload", "value": "7b9efc7ef8957411cdd22582ce4bfb3a5f76d9c91cdb7e36bf85c9785a2480e9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952174, "uuid": "82079c1b-8f4a-49df-af68-4f4d106bf98c", "value": "T1777633F5463F59B3265B83BCB558440E93C9867C91CF013BD7ACA7C386BEBB101699", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952174, "uuid": "95f320c0-b0bd-4960-a465-4331074332ad", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952174, "uuid": "c8b5e20f-367f-4b2e-aa26-2a697679a006", "value": "196608:d7YwHfueyh4imo5Yb/mFYTJ0AfD0ghVg23qcdO4A5hTq:d5uDXYTmKJ0Ab0gF3qZZnT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740952174, "uuid": "8f699ec7-af52-45dc-a2ae-84173140c54d", "value": 7266304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952174, "uuid": "adbfaacd-b113-49d8-9e6c-2322d622ffe3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb2d5d42-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "32ff474a-9818-4160-9150-d2c6fc2f4c72", "comment": "Malware payload", "value": "8be28402cad30855939d197c835f5e92", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "57f01cc7-947d-41ce-992a-5329c559e3f4", "comment": "Malware payload", "value": "dde8689ab054f350c9f650f8415fb9126cf6009b68e444255522d1456d9ad95d", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "0616b97b-2f00-43d2-8695-4f0ecd98fc48", "value": "T1FE3149046AEA0702E2728A359879E321C43B7C46DDB55F5E00DE554C2767510F9B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "33df7c45-9c3d-45d7-afa7-a8061b315e8b", "value": "12:8Ws0m/3BVSXvk4+/n/6s/U9RWW+Uc+NsntY9WIWXWjZQleZ+clKmZASW17DiNMIh:8P/BF//Z/U9p+/+GmWbm+eNKRaY1Su+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953705, "uuid": "fbe93968-a715-497f-baa6-959ab0ab3e66", "value": 1526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "f9fbaa31-338e-4a45-be24-2121b1d176af", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb3222ee-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "650809ff-d8c7-4c32-8dd7-adaa35a44b09", "comment": "Malware payload", "value": "9849c3d1e545025803e48ab2399d00c1", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "1d86795a-bd81-4bba-bb6e-b3876c0704de", "comment": "Malware payload", "value": "badf54fcb0b8be8c7feb3d27b7bad44f7f9270d51b78230af189e33e2fef64b0", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "0eb36bd6-e55d-45fb-be9b-c7171bfc29db", "value": "T13D41A3042AE90312F3B28E31987AA220C83BBC45DE708E0E008E41481363620E8B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "5b059c5c-36c5-43af-b505-5bdb11b5c879", "value": "24:8Ayj/BF//Z/U9p+/+GGgWbmXBt4xdd79dsY1Su+:8ZLZwRGGgagOdJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953705, "uuid": "dd679126-4232-4307-9751-f66d700a9a64", "value": 2406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "df0e60ab-fe22-429d-bc05-f52cecf2f442", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb323176-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "b48e22cd-8d63-4f2e-b7cf-0c9671cd2bf3", "comment": "Malware payload", "value": "5fd89049fa54a3f53881575781365217", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "5d40083c-53fa-42e3-8b69-0de21468d372", "comment": "Malware payload", "value": "29f164120b880239555e67cc2968102f86142c4c5d602589cba6197b0de6d81a", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "f20f63cf-9538-42df-93ee-1e7168ae95d6", "value": "T1E63126046AD60312E2728A349879E321C43B7C45EDB59F5E008E5548276B610F9B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "e649a335-d2cf-4221-9dfc-b71019a0ac04", "value": "12:8Ws0m/3BVSXvk4+/n/6s/U9RWW+Uc+NsRy9WIWXWjZQlGclKm65z7DiNMI0YuuIY:8P/BF//Z/U9p+/+GMWbm+LopaY1Su+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953705, "uuid": "8ae250e7-d89e-43a3-9dfb-e52e416011ee", "value": 1522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "6f3509d3-47ff-48c0-a6e8-d114e59d1919", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4b0016-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "e5b5fd80-8cdc-4442-9e1c-717748ce5d44", "comment": "Malware payload", "value": "96b7df265a5bbba7d8744723426833fc", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "80624cfb-2acc-477c-982e-71870bb8b2d7", "comment": "Malware payload", "value": "b0ea0ab085f27f95b7636d6e5d6ead4b91d9d275209e80d9c740443d51835ead", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "388e2af3-ca71-441e-b076-07cca8508e96", "value": "T14F3126086ADA0702E2728A3498B9E321D43B7C41EDB65F5E00CE55482367610B9B1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "8ab2b506-fda8-43e1-aee0-ba9d315f5488", "value": "24:8U/BF//Z/U9p+/+G5Wbm/xrBtMaY1Su+:8wLZwRG5az", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953705, "uuid": "063f7792-82ca-487c-8c94-50571ef3e8d6", "value": 1516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "798f5194-83ba-4df1-afff-c72e8d5061b0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb51027c-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "bbff5921-2397-4ccd-847f-f791a48aa5bb", "comment": "Malware payload", "value": "2c6a1b6e079ddfb332f182d085ade78a", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "ced2d4e2-2c5c-458a-ae01-4992cccc25b3", "comment": "Malware payload", "value": "bb827f92bc43997cd16073f99b9d92f3c497d174fb33e1c72440c821586ecd92", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "3cf0d8f5-8abb-4f63-ad85-96b0d09f6677", "value": "T1C44189042AE90312F3B38E759476E720C43BBC45DD719E0E008E41481767A24E8B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "dfce5db4-c646-41d8-881b-e43b95ddff05", "value": "24:8Ayj/BF//Z/U9p+/+GjWbm+En9JXdd79dsY1Su+:8ZLZwRGjaYzdJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953705, "uuid": "448c57a3-fad8-4592-ac62-2008b334a04e", "value": 2390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953705, "uuid": "deb619e9-74a3-4e99-96c1-e92f01666c9d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59d19c23-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "6b345948-8d5f-4aed-b812-ebeee6b3de81", "comment": "Malware payload", "value": "fd85df882dc5ae453b0007064803ac49", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "a277ed3f-7c45-42b0-96de-2067f55216e8", "comment": "Malware payload", "value": "592fce5458b2beeecac7317ba0ced1b8688ed11fa473444904a679cc0a9bafe7", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "d04052a4-2d59-4419-b269-a1bc7f5e8f29", "value": "T1C34166047AE90311F3B38E7558BAA721D43BBC06EE715A1D008E46482B37614E5B9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "3ff4de61-d373-4594-ba72-d18a866d698c", "value": "24:8Ayj/BF//Z/U9p+/+GuWbmkQ+dd79dsYwu:8ZLZwRGua6+dJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953944, "uuid": "6db6352f-439c-42fc-aed3-b12790b27ac4", "value": 2428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "df4beee5-2ab1-4cb7-abb1-ad793a266426", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59dde669-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "385fbaa3-469b-425a-9a95-d456a539ac35", "comment": "Malware payload", "value": "60509ceb95321a13c6f56b301a1e889e", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "2317153c-6388-499f-a2b9-2dc7a69dc847", "comment": "Malware payload", "value": "89a357e475a72dc61fd4be455e94756cb7886f032941fb64c492d492fd6a1f5c", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "fdefb889-7373-49b8-a89b-89fa30a896a8", "value": "T1F4312B046AD60311E1724F7558BAE711C43B7C42EDB55F5D008D55482B37210F975F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "66015071-6b1a-4a13-ad72-2933fab24aba", "value": "12:8g0m/3BVSXvk4+/n/6s/U9RWW+Uc+NsTA9WIWXW5lrtq49lKiH+97DiNMI0YG6ln:8+/BF//Z/U9p+/+GMWbmYSVe5aYwu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953944, "uuid": "aa0cb2e8-f89b-4903-b29b-b459b47f81a6", "value": 1538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "5f631f14-0245-4984-969f-fa22df62dd57", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "198afbc5-f54e-11ef-9894-82aee05be84a", "comment": "Malware payload (Quakbot)", "timestamp": 1740953944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "410baa5f-cd4a-41ca-8379-6a0a7d960d10", "comment": "Malware payload (Quakbot)", "value": "f5eef754d13fc28e33e5a1626c435480", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "3412d181-c5f8-4264-88a5-7a647948d1e9", "comment": "Malware payload (Quakbot)", "value": "5c5861fbd6959033034da6dbc18fee8073a402c9edf4c557662bac33dbfcbab9", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "3fc00da9-616b-4e73-a114-28f38146fee9", "value": "T137312B046ED60721E2B38E7598B9A711C53B7C82EDB55E5D008D52481B37610F5B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "bd63cdaa-2ff5-415d-ae44-b0f9472661d6", "value": "12:8g0m/3BVSXvk4+/n/6s/U9RWW+Uc+NsTo9WIWXWRhlrLHclKms7DiNL4t2Yg8e8Y:8+/BF//Z/U9p+/+GEWbmRg8a5fe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953944, "uuid": "1e311dfa-2b7c-4778-9e36-13d21c06ce1b", "value": 1546, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953944, "uuid": "df2ced66-7c85-4f2c-aee7-556e7912e887", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19cd77fa-f54e-11ef-9894-82aee05be84a", "comment": "Malware payload", "timestamp": 1740953945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953945, "uuid": "42a8a54f-2824-415c-8d5e-10346076c7e3", "comment": "Malware payload", "value": "51dab940b8a53f27586a707eda07e2e9", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953945, "uuid": "2e3067b9-6b95-4a89-b9ca-ef77ab76b04b", "comment": "Malware payload", "value": "766690a09ec97e414e732d16b99b19389a91835abc15684cc0f1aba2ca93cf98", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953945, "uuid": "1e571cd0-6e37-48f7-9b13-f536dcc1beab", "value": "T152416A447AE90311F3B34E7558BAA721C83BBC06EE709A1D008E42481B33714E575F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953945, "uuid": "36560419-6570-4b53-aad1-824b2b821614", "value": "24:8Ayj/BF//Z/U9p+/+GkWbmKm9+oddqVP9dswu:8ZLZwRGkaskod0p9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740953945, "uuid": "52f27b0e-bfe0-42c6-a0b4-aff9334a90d5", "value": 2424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953945, "uuid": "cf67d3f3-8f9a-4f0f-ad84-3e9f16df1aac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8eb08e-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740954246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954246, "uuid": "29f11995-3c43-4cf8-b06c-95853f7c98c9", "comment": "Malware payload", "value": "6df4af11a905c78fda64fe9db51a65d9", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954246, "uuid": "17a9070a-d0ab-4f85-a27d-80415e9c1be3", "comment": "Malware payload", "value": "19b54ba8b87e37e8f34e794c879d53c5959774216db188d70f487c095d95e710", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954246, "uuid": "9630c1bb-4c10-40ff-92e5-4419ced7c1e6", "value": "T17E4136006AEA0715F3B38E35547AA720D47BBC46EE719E1D008D428C1723A14E975F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954246, "uuid": "8e9c2eea-7ba0-4956-8ded-9054fce87ab7", "value": "24:8lj/BF//Z/U3A+/+GgfIWb4XY9kdd79dsH/0Qi:81LZ4uGgAa4okdJ9e0H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740954246, "uuid": "0de3fe41-e461-416c-b043-9b0b87d008f3", "value": 2402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954246, "uuid": "59a866a7-d8a0-4625-9523-c615e991908e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "073d5db2-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740954664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954664, "uuid": "62884a93-53a8-4688-84b6-78d5074c253f", "comment": "Malware payload", "value": "34ba6ba9a5476135155f19dba17f622c", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954664, "uuid": "ba6416d3-2d99-40b5-8d73-0e567b1d89d5", "comment": "Malware payload", "value": "dd303b2e64f851ca23664b6d12019baef5e8cfd4b70e10fe2161a3082d570482", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954664, "uuid": "d5d09c56-a701-446f-b520-50b34b7725a1", "value": "T1444136042AE50315F2B39F71847AA721D47BBC46DD719E1D008D42481723614E475F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954664, "uuid": "bc86bb8f-9e53-481d-878c-85d2e6b51b64", "value": "24:8Ayj/BF//Z/U9p+/+GlmWbmzJ9Rdd79dsrabw:8ZLZwRGlmaSJbdJ9Aa0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740954664, "uuid": "0fb06545-3e5f-455c-9362-64f3a5e7c99d", "value": 2388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954664, "uuid": "28bcb8dd-8361-4de0-b45d-ca37d36c80cd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07709018-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740954665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954665, "uuid": "918f2106-a544-4e39-88b7-5c07b3a36497", "comment": "Malware payload", "value": "4b912b74071de5d2a5668fd39f3d2ba6", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954665, "uuid": "0abf2eaa-4160-4318-b7f1-ae3b76188383", "comment": "Malware payload", "value": "be6c4bf7caa7c955f9ed806cd9aebc279948fe156eb7b5b03a88cbb8f0f7b28f", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954665, "uuid": "92c164b0-83e3-4634-be95-4e5a4b213e4c", "value": "T1DD4133046BE90311F2B39B7198BAA721C43BBC4ADE719E4E008D46881767614E4B5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954665, "uuid": "9934530e-f05e-4638-9ac8-86300137b357", "value": "24:8Ayj/BF//Z/U9p+/+G7WWbmRdCSFeSdd79dsrabw:8ZLZwRGCaC1eSdJ9Aa0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740954665, "uuid": "1cbed095-15b0-4e31-b11c-53ce6a37d8c2", "value": 2392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954665, "uuid": "70c048cc-e399-4f08-85f1-f08f17026b1f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0923ed4a-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740954668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954668, "uuid": "336fc074-f35e-4ad3-bb0c-ae4280b36001", "comment": "Malware payload", "value": "1e78a234ca921e7b344dc8508fd8d9a0", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954668, "uuid": "d979262e-15ca-46e8-acc4-dd9f6a5301df", "comment": "Malware payload", "value": "bd33ef85f95b1c1f91571d73a5f195ad6d2a8333321932c0b61adc4de97016a8", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954668, "uuid": "1173f777-1c07-407b-b4e4-d618a007ec39", "value": "T13B66E5AE571C350FEA521735B0CC171B6B74ED69135387834851B2368C3A2A6CEA62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954668, "uuid": "ca8dc60b-9146-4e9c-81c1-6613121c093f", "value": "12288:lqY0S01a3XM74zvGppR93Po/2rH+NgLFP:cO01a3XM74zvGppR93Po/2rH+NgLFP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740954668, "uuid": "091dea65-3caf-4dab-b517-461a0a665a13", "value": 6739423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954668, "uuid": "4543f6b2-7105-4399-acc3-13537226fd44", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b2e3a40-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740954725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954725, "uuid": "847a69ea-3497-4c6c-ad67-10845174c295", "comment": "Malware payload", "value": "e7ef02a256d4909f12acd714925728ae", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954725, "uuid": "4947cd4d-8e6b-4fac-a126-31b75864d78d", "comment": "Malware payload", "value": "0c1ac50cebbd8da8ca2130e8af0f9a6e2f9905cd1ad9fa1d25083324978c4a08", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954725, "uuid": "16cb77d7-310c-421e-a1c0-b3d6e38d9c8a", "value": "T1C1C5740E5769A21ED5204274F8CD432B3375EC8C4A8B974B55C9B0306CB62E9AED46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954725, "uuid": "4bb83588-d881-4237-b48b-7c668a98207f", "value": "12288:2cb92javuK1v7K/IEPQv1vZKEr0v2vtKSvxKmKaK8v7KOv1vgKMKeK0KSK2K+v+9:2CAAWHAMPLvNI9Dln70CZV4R4uO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740954725, "uuid": "8d0455ef-fc49-4b9e-adb2-d694f3ffb45a", "value": 2653089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954725, "uuid": "41dee23b-cb2e-4bb6-bd1a-db32db7921ed", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1740955633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955633, "uuid": "7b3cd549-918f-474b-9072-79184717889e", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955633, "uuid": "12525222-1535-430f-b93b-8e22ca2336b5", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955633, "uuid": "b9da0b3f-b40f-42e7-aa87-0caea1251c73", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955633, "uuid": "632c3a56-043e-4506-b122-c1bd002347ca", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740955633, "uuid": "fd14b57c-2ae1-47be-a953-c0c7e4eb2eb0", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76fed4e4-f7b9-11ef-a1f3-82aee05be84a", "comment": "Malware payload", "timestamp": 1740956140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956140, "uuid": "ec76332c-4f3d-4f35-b5e0-8f806c9b8818", "comment": "Malware payload", "value": "5c6149e40fcb568d767a7fea16353ed4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956140, "uuid": "ea1c40ee-9b1e-4403-8f7f-247942126e7a", "comment": "Malware payload", "value": "663e7b9d881b6773345a990a7c6bb7ccfcb6b74290bb5d6e714c1b2ab821fe13", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740956140, "uuid": "36eec330-27b5-4a06-97a2-b2ff41d2896a", "value": "T13AE53971A50571EFE49A1278A467CDC65C1E03F91B1089D3A869A8BABD73CD037F6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1740956140, "uuid": "37057c29-2a4d-4ea0-8eab-8400c1b1a06f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740956140, "uuid": "3a321140-7a8d-420b-b8fc-207c41a6cb12", "value": "49152:aHmh79CnVTJXtYMIquoIH+fDZmswXro0GeMAPBIOlmCEd:aHqonVTJdYM1uo8+fDZmxXEqMrOw5d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740956140, "uuid": "927102a5-6529-4fd5-b5ed-cf0a625a4c72", "value": 3211776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740956140, "uuid": "67c687da-1504-477d-9ed8-69692108e4b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "954f6f93-c601-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1740957845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957845, "uuid": "a7efae29-9938-42ed-a3fd-8bafaa49113b", "comment": "Malware payload", "value": "24ec6ae555e30b3b9e7eade8089c7ef2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957845, "uuid": "1920b123-336c-42b1-a360-389658991441", "comment": "Malware payload", "value": "2872b565c8db6ac2c1dbc7816ebe15efa784d12b7357842e8a472b0884cbf5a6", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957845, "uuid": "cfb9596a-c798-49e3-805b-4ec88d50f451", "value": "67640293D725BDABD81395B0656F13987378C2CAC34B828173588C6D397E34617EA2CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957845, "uuid": "723e7afd-7a84-4ae2-9e22-52af5816b7f2", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoo3Q:2IIKXhZtL7jOTyIG87X0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1740957845, "uuid": "523c9b17-5108-42f5-be8a-b0fb494a7e75", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957845, "uuid": "edc7a39d-a32d-4a59-8ea7-fd62fcf46c1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873683, "uuid": "7a6511d1-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.55:58773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873783, "uuid": "b63b0f33-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.129:53226/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873786, "uuid": "b7f591cd-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.2.56:36794/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873786, "uuid": "b8145bd7-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.222.162:54186/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873788, "uuid": "b93156a6-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.122.61.149:44313/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873788, "uuid": "b9400fb0-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.1.153:40139/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873788, "uuid": "b948daef-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.219.238:48519/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873788, "uuid": "b9698976-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.230.255:50877/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873799, "uuid": "bf7b326b-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.221.34:47376/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873807, "uuid": "c442ee7f-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.254.94:50977/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c7d348f0-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.175:11925/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c7d3a097-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.168.120.196:32823/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c7de5c82-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.198:11544/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c7e0cd05-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.1.113:39047/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c7f61db6-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.187.12:46588/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c7fc341a-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.160.221:48862/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c80585ae-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.25.165:53163/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873813, "uuid": "c8214082-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.98.36.228:35898/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873814, "uuid": "c855addd-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.162.185:41935/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873817, "uuid": "ca5341e7-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.134.160:36330/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873835, "uuid": "d5201930-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.65:36236/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873864, "uuid": "e695c193-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.54.89:44176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873905, "uuid": "feabcb49-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.40:60112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873905, "uuid": "fef8f196-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.233.173:57414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740873964, "uuid": "21edeab6-f6fa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.79.212:36286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874028, "uuid": "485fc4d6-f6fa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.243.110:48627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874144, "uuid": "8d9af38f-f6fa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.105.199:48709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874385, "uuid": "1d11ab09-f6fb-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.55:58773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874445, "uuid": "40a34eca-f6fb-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.154.190:42405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874745, "uuid": "f3806173-f6fb-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.213.159:44699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740874985, "uuid": "82a10b3f-f6fc-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.162.137:44602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740875046, "uuid": "a6b41b46-f6fc-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.123.13:40615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740875764, "uuid": "52c1a2de-f6fe-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.154.190:42405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740875946, "uuid": "bf4b13d9-f6fe-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.196.35:51149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740876184, "uuid": "4d243131-f6ff-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.162.137:44602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740876319, "uuid": "9dabf448-f6ff-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.106.117:41982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740876725, "uuid": "8f7e0598-f700-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.123.13:40615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740877326, "uuid": "f5f98e44-f701-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.113.82:44687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740877986, "uuid": "7f5fe6a0-f703-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.214.182:33142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878044, "uuid": "a22e8813-f703-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.199.85:40405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878105, "uuid": "c6709aac-f703-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.196.35:51149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878134, "uuid": "d7552b59-f703-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.10:39890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878180, "uuid": "f2f70722-f703-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.53:40517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878345, "uuid": "557d8d5b-f704-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.180.220:33198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878346, "uuid": "55b0fe1e-f704-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.132.56:50270/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878353, "uuid": "5a025034-f704-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.2.53:59471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878617, "uuid": "f758eda6-f704-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.129:38991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878727, "uuid": "394b42c0-f705-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.113:44728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878913, "uuid": "a7e3d151-f705-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.218.239:33125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740878945, "uuid": "bafa3828-f705-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.120.205:60276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879065, "uuid": "0245852c-f706-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.65:59965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879125, "uuid": "2620034a-f706-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.180.220:33198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879126, "uuid": "270fe26a-f706-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.2.53:59471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879322, "uuid": "9b7d63e9-f706-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.84.148:56855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879425, "uuid": "d8dfd3d5-f706-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.12.153:45245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879484, "uuid": "fc5f36fe-f706-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.129:38991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740879545, "uuid": "206839f7-f707-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.212.13:52902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880385, "uuid": "153bcfbb-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.72.8:34973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880386, "uuid": "158d6fcb-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.84.5:47481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880505, "uuid": "5cb7d48d-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.224.178:51393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880506, "uuid": "5da3f80f-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.75.113:44728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880640, "uuid": "ad2c167d-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.70.229:43428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880744, "uuid": "eb182ed9-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.212.13:52902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880744, "uuid": "eb7d20c1-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.252:50205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880745, "uuid": "ebd51323-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://ykapi.luyou.360.cn/rule/check?ckey=HXObg/Fb4r55g2c9XTgFe+QHcHp5ruS5rMa4ZXbNdAi/P9EpQNTsygeB2//J7uWDAVqHgkQegYjK/JX7AAl9MZqeotIOVeF4nODqqKLzgYErJ3RsbWl9VoyRkaxQdkto8iActPrZoHHBlrDAVEgm3dfkQZHtx2Z7hCD+oUD4R78=&data=c33UqC6I2znHZZYK4dky1nIdL24zA3c1Y4/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880773, "uuid": "fc9e9a9b-f709-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.139.20:46341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880807, "uuid": "10963c7a-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.113.159:60420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880865, "uuid": "336b66da-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.65:59965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880941, "uuid": "607dddf6-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.250.229:45254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740880985, "uuid": "7a964ed6-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.175:43786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740881164, "uuid": "e5dd44ae-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.87:54347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740881347, "uuid": "52767201-f70b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.105.71:32799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740881826, "uuid": "6ffcc576-f70c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.120.205:60276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882063, "uuid": "fd484116-f70c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.224.178:51393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882068, "uuid": "00539667-f70d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.185.21:45567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882124, "uuid": "21ca5e9c-f70d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.4.88:52782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882364, "uuid": "b0f76b02-f70d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.176:44522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882606, "uuid": "4151e138-f70e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.175:43786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882666, "uuid": "64c18210-f70e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.45.20.53:60005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882726, "uuid": "889b9709-f70e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.105.71:32799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882785, "uuid": "aba6498d-f70e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.113.159:60420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740882867, "uuid": "dc6268ae-f70e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.56.195:60453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883025, "uuid": "3a8cac2e-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.87:54347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883084, "uuid": "5dc79749-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.195.218:53556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883085, "uuid": "5e66cc7f-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.248.219:48322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883162, "uuid": "8c87618a-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.210.115:57671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883205, "uuid": "a66545ba-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.146:37259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883207, "uuid": "a747020e-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.161.79:52457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883565, "uuid": "7cb3ab9b-f710-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.4.88:52782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883577, "uuid": "83a1a4f4-f710-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.112:50715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883581, "uuid": "85f7d22e-f710-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.203.11:50053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883684, "uuid": "c34feb3c-f710-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.195.218:53556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740883762, "uuid": "f1d3ffec-f710-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.14.104:39138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884106, "uuid": "bed67826-f711-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.12:45210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884164, "uuid": "e193db1f-f711-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.178.254:60051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884346, "uuid": "4e0b59cc-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.131.119:60953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884404, "uuid": "7108a1ec-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.56:46839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884466, "uuid": "95b3970b-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.191.65:57143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884585, "uuid": "dcb4247c-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.154.83.45:34860/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884587, "uuid": "ddf37ddc-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.187:51306/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884588, "uuid": "de9698c0-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.85.242.60:38737/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884607, "uuid": "e9928d66-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.163:52254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884613, "uuid": "ed1ab5a3-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.132:10894/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884613, "uuid": "ed83b79d-f712-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.186.249:60498/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884944, "uuid": "b2c65429-f713-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.233.94.135:41454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740884947, "uuid": "b44b7c30-f713-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.64.135:48717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885244, "uuid": "65973b10-f714-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.8.107:52751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885244, "uuid": "659a51d1-f714-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.165.197:51619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885245, "uuid": "65f85469-f714-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.30.252:46341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885306, "uuid": "8a235f6d-f714-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.112:50715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885306, "uuid": "8a2d343e-f714-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.131.119:60953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885544, "uuid": "181e4b3c-f715-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.12:45210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885725, "uuid": "845d6416-f715-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.11.118:48968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885725, "uuid": "8466522f-f715-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.77.29:42440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885753, "uuid": "94a5a2e1-f715-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.187.63:49601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740885969, "uuid": "15a8e8f7-f716-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.113.89:47573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886084, "uuid": "5a4fd6ea-f716-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.13.112:45348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886205, "uuid": "a2384681-f716-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.255.247:53634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886282, "uuid": "cfdcce37-f716-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.98:34102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886564, "uuid": "7862aafc-f717-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.64.135:48717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740886626, "uuid": "9cf670b4-f717-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.233.234:41777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887406, "uuid": "6df78b4f-f719-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.102.86:40051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887464, "uuid": "90ce2064-f719-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.187.63:49601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887613, "uuid": "e9701588-f719-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.25.225:46284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887706, "uuid": "20ab4f82-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.11.209:44343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887706, "uuid": "2114fb4e-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.238.184:49938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887824, "uuid": "67497659-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.233.234:41777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740887958, "uuid": "b70e6ad0-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.174.189:35270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888007, "uuid": "d43e3515-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.229:40779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888065, "uuid": "f699b249-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.238.184:49938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888185, "uuid": "3e908eea-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.27.109:39215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888244, "uuid": "617fc299-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.122.117:59012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888303, "uuid": "84ec373a-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.188.91.108:60036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888305, "uuid": "85c256c3-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.19.143.26/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888305, "uuid": "85c7a6da-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.160:45146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888333, "uuid": "96c82ea8-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.236.93.129:43975/Mozi.a", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888334, "uuid": "96fee023-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.251.136.126:60464/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888350, "uuid": "a0f576db-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.245:38752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888425, "uuid": "cd5bb710-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.178.38.168:39210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888547, "uuid": "160834ee-f71c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.92:59642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888607, "uuid": "3a1ac6d6-f71c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.20.103.94:48911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888907, "uuid": "ec82aaf9-f71c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.235.152:45209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740888964, "uuid": "0f008bc1-f71d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.140.45:41048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889152, "uuid": "7eb31848-f71d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.220.7:52283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889224, "uuid": "a98ed138-f71d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.95.170:50223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889565, "uuid": "74e949ff-f71e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.229:40779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889565, "uuid": "750a46df-f71e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.98.134:53373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889744, "uuid": "dfdba4fc-f71e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.19.142:52159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889745, "uuid": "e04e4012-f71e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.254.183:55590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889879, "uuid": "30533414-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.193:37364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889984, "uuid": "6e96c3f2-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.27.109:39215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889984, "uuid": "6e9cabc3-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.142:44149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740889985, "uuid": "6f61664e-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.116.188:38045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890045, "uuid": "92dca162-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.62.168:41295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890225, "uuid": "fe443925-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.62.138.215:47573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890285, "uuid": "223ec0db-f720-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.181:59168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890286, "uuid": "227248cb-f720-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.153.128.101:32879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890301, "uuid": "2bef2d1b-f720-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.94:34850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890525, "uuid": "b1736645-f720-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.220.7:52283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890705, "uuid": "1c3896e9-f721-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.254.183:55590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890763, "uuid": "3f481061-f721-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.140.45:41048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890766, "uuid": "40ee9691-f721-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.225.31:53537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890775, "uuid": "4641c127-f721-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.216:54567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740890884, "uuid": "876379fb-f721-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.19.142:52159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891193, "uuid": "3f172996-f722-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.83.136:44012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891306, "uuid": "8289e1d9-f722-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.28:47616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891425, "uuid": "c97683d1-f722-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.174.189:35270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891544, "uuid": "10bc034d-f723-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.109:56500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891844, "uuid": "c3964560-f723-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.245.2.2:44812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891963, "uuid": "0a4cf6b0-f724-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.123:36283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891964, "uuid": "0aeb2a60-f724-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.247:38362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740891965, "uuid": "0b3628d9-f724-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.100.142:46012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892265, "uuid": "be52ca79-f724-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.217:37944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892563, "uuid": "6fc1c38e-f725-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.28:47616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892625, "uuid": "94c6a36c-f725-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.16.114.29:54446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892805, "uuid": "002b073d-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.193:37364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740892924, "uuid": "474c97f2-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.235:53348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893044, "uuid": "8e94783d-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.225.31:53537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893044, "uuid": "8ecc0fdd-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.78:54846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893105, "uuid": "b31ceb4f-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.216:54567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893106, "uuid": "b3997a27-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.171.87:40125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893163, "uuid": "d57f6389-f726-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.141:42628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893345, "uuid": "41f2571e-f727-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.153.128.101:32879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893345, "uuid": "4226ef81-f727-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.217:37944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893466, "uuid": "89e16a04-f727-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.112:47445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893588, "uuid": "d2f01892-f727-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.179:48431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893793, "uuid": "4d499688-f728-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.146.175:47483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893825, "uuid": "5fef7a73-f728-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.176.210:52131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740893899, "uuid": "8bfcd72a-f728-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.136:57895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894185, "uuid": "366eba20-f729-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.211.206:51055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894304, "uuid": "7dbcabfd-f729-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.141:42628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894363, "uuid": "a0fcd427-f729-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.235:53348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894485, "uuid": "e9793cd0-f729-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.69.24.75:58892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894606, "uuid": "3162eed2-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.25:34169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894664, "uuid": "540ad5b2-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.76.254:34832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894664, "uuid": "54280778-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.25:34169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894724, "uuid": "78122ffc-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.171.87:40125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894725, "uuid": "78a7f061-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.83.76:50902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740894785, "uuid": "9c2cc5e0-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.236.95:39887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895085, "uuid": "4f25a810-f72b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.253:36759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895267, "uuid": "bb8a3aa0-f72b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.146.175:47483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895333, "uuid": "e2ebcbf6-f72b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.136:57895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895385, "uuid": "01f26d3a-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.64.155.152:56095/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895385, "uuid": "01f5caab-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.170.129:40222/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895386, "uuid": "02610a54-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.178.38.121:32916/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895387, "uuid": "02dc25fb-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.114:56769/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895387, "uuid": "02f2518f-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.198.125:58593/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895401, "uuid": "0b3cf1c2-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.189.136:33924/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895413, "uuid": "12b02454-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.103:11626/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895413, "uuid": "12b0250d-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.251:11861/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895413, "uuid": "12b0a79b-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.254:11614/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895414, "uuid": "1319f233-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.78:33564/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895414, "uuid": "131be556-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.144.248:36579/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895414, "uuid": "131fde31-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.13.178:57403/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895565, "uuid": "6d1e466e-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.4.50:36127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895644, "uuid": "9c52609e-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.185:58969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895805, "uuid": "fc649278-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.65:58437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895806, "uuid": "fca0dd25-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.195.102:43267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740895984, "uuid": "671d9b7c-f72d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.236.95:39887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896284, "uuid": "19909116-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.76.254:34832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896406, "uuid": "623d0d95-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.253:36759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896524, "uuid": "a90fd773-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.83.76:50902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896525, "uuid": "a9b36b0b-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.64.78:55780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896764, "uuid": "37d65fae-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.121:44065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896764, "uuid": "38096726-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.186.216.187:47311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896767, "uuid": "3987b95a-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.161.68:51966/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896767, "uuid": "39afcbde-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.111.240:60928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896794, "uuid": "49840575-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.220.132:47002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896794, "uuid": "49a408f4-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.176.97:39773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740896886, "uuid": "80920483-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.179:48431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897066, "uuid": "ebcc6d85-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.27.155:57472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897125, "uuid": "0ed75856-f730-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.195.102:43267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897139, "uuid": "1756b1af-f730-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.54.37:36920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897306, "uuid": "7b2a29c6-f730-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.252.189:35761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897484, "uuid": "e53578e3-f730-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.202.165:60975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897845, "uuid": "bc62a310-f731-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.64.78:55780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740897906, "uuid": "e086f3d5-f731-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.240.219:34283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898026, "uuid": "27f2dcc8-f732-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.111.240:60928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898222, "uuid": "9ccba87e-f732-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.56.39:37507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898264, "uuid": "b5c17e02-f732-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.27.155:57472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898266, "uuid": "b72853b4-f732-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.184:60973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898325, "uuid": "da6dbfc4-f732-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.226.218:37198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898624, "uuid": "8c775b3b-f733-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.17:49368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898685, "uuid": "b1158d67-f733-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.190.241:59984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898687, "uuid": "b1f2c3a1-f733-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.180.131.129:49591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898746, "uuid": "d5186cd4-f733-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.53.6:38371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898863, "uuid": "1af370b3-f734-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.suqev.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740898865, "uuid": "1c0fa48b-f734-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.252.189:35761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899045, "uuid": "87bfe658-f734-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.25.131:36631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899105, "uuid": "ab68abb0-f734-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.166.237:49539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899285, "uuid": "1676dd57-f735-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.222.48:59557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899286, "uuid": "1758758c-f735-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.142.59:54423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899424, "uuid": "6957e5a6-f735-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.96.186:38389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899525, "uuid": "a581ac4c-f735-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.240.219:34283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899525, "uuid": "a5889714-f735-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.218:58923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899793, "uuid": "4558cfa5-f736-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.227:47354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899827, "uuid": "59492b32-f736-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.226.147:39282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740899945, "uuid": "a01e6c4f-f736-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.25.226.218:37198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900028, "uuid": "d15df298-f736-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.190.191:57012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900066, "uuid": "e829c896-f736-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.180.131.129:49591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900123, "uuid": "09c6fb89-f737-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.53.6:38371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900543, "uuid": "04511bd8-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.207.55.235:3000/public/fff.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "04c99556-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.207.55.235:3000/public/ccc.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "04d3dbd1-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.25.131:36631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900544, "uuid": "050416e8-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.64.83.210/service.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "067976f9-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.207.55.235:3000/public/aaa.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "06a0ae26-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.207.55.235:3000/public/bbb.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900547, "uuid": "06cf0cfc-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.207.55.235:3000/public/hhh.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900609, "uuid": "2bebde4c-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://rdmfile.eu/install/5YL3CDQOOW4Z", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900663, "uuid": "4bdb5728-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.17:49368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900785, "uuid": "94a812fc-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.17.32:48768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740900964, "uuid": "ff099a6a-f738-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.222.48:59557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901024, "uuid": "2350efc2-f739-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.96.186:38389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901025, "uuid": "238fd9d7-f739-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.49.115:41222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901084, "uuid": "46cf4ad9-f739-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.227:47354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901084, "uuid": "470729fd-f739-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.181:38417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901264, "uuid": "b242c1b5-f739-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.171.167:51762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901265, "uuid": "b267b82e-f739-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.24:34003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901572, "uuid": "69e5b523-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.211.179:50279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901684, "uuid": "ac8fb6f6-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.180:34930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901685, "uuid": "acc9bf67-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.20:39115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901744, "uuid": "cff4ae5e-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.124.40:55812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901746, "uuid": "d119d4ee-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.134.48:44781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901814, "uuid": "f9ca88b6-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.184:36122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901864, "uuid": "17e20fc3-f73b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.124.53:50762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740901924, "uuid": "3b59b237-f73b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.56:46839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902284, "uuid": "120da60b-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.124.53:50762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902405, "uuid": "5a2450ff-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.197:59113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902406, "uuid": "5a906cbc-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.190.191:57012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902464, "uuid": "7d10f431-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.24:34003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902524, "uuid": "a119a077-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.181:38417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902646, "uuid": "e9f4019a-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.226.147:39282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902664, "uuid": "f47c8779-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.192.87:59257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902825, "uuid": "543e2c11-f73d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.180:34930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740902946, "uuid": "9c6f967f-f73d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.170.100:42128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740903006, "uuid": "c04b4356-f73d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.171.167:51762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740903006, "uuid": "c055ef7e-f73d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.134.48:44781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740903125, "uuid": "076203ec-f73e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.184:36122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740903785, "uuid": "90e520b2-f73f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.203.239:55559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904023, "uuid": "1e9a948e-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.12.131:55027/Mozi.a", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904024, "uuid": "1f17e271-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.179:34736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904024, "uuid": "1f34e827-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.24:39756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904025, "uuid": "1fde1d66-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.192.87:59257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904031, "uuid": "23108dcf-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.63.219:39490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904033, "uuid": "248b5c39-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.73.180:58408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904041, "uuid": "297b76a8-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.73.180:58408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904070, "uuid": "3a7ac1c9-f740-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.63:42504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904564, "uuid": "610bc804-f741-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.139.134:38185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904683, "uuid": "a8466150-f741-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.ninif.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904924, "uuid": "37ea763e-f742-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.128.178:57293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740904985, "uuid": "5c126fd7-f742-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.203.239:55559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905164, "uuid": "c6d48e45-f742-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.11:34145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905285, "uuid": "0eed4c43-f743-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.8.35:53555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905286, "uuid": "0f1f3318-f743-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.156:46803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905405, "uuid": "569deda3-f743-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.122:46211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905463, "uuid": "78fd605d-f743-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.139.134:38185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905584, "uuid": "c0f754ee-f743-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.152:53873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905644, "uuid": "e502f3d3-f743-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.128.178:57293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740905824, "uuid": "50222c29-f744-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.117:58294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906006, "uuid": "bc7b462d-f744-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.15.219:50192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906065, "uuid": "df7ece87-f744-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.178.146:42495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906273, "uuid": "5b66afa2-f745-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.38.0.69:56649/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906273, "uuid": "5b6b2d24-f745-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.178.250.178:10343/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906545, "uuid": "fe06c9a2-f745-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.156:46803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906724, "uuid": "68cecb8a-f746-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.11:34145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906907, "uuid": "d5adc5cb-f746-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.128.13:58003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740906964, "uuid": "f77f3ae0-f746-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:42373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740907144, "uuid": "62a8dc54-f747-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.152:53873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740907145, "uuid": "63a7a89d-f747-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.120:37940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740907163, "uuid": "6e6386bf-f747-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.248.126:43957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740907743, "uuid": "c7ec2b8b-f748-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.tyheb.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740907805, "uuid": "ecda9795-f748-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.178.146:42495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908104, "uuid": "9edf16f9-f749-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.113.115.7/files/5165347769/T3g5uSf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908105, "uuid": "9fae2ec8-f749-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.113.115.7/files/748049926/bwuGbC2.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908344, "uuid": "2e0a9be9-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.164:44531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908356, "uuid": "35276665-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.194.29.122:39533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908358, "uuid": "36a82b2b-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.99:42456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908405, "uuid": "52a57faf-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.128.13:58003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908407, "uuid": "53ae9fb1-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://vx-events.com/build.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908646, "uuid": "e21ef6fe-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.71.68.52:59072/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "063110a0-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06995fdf-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06a1cc0f-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06a6d1ef-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06a6dc7c-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06a95b22-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06ae2207-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06b0e236-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908707, "uuid": "06b0e8c7-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908708, "uuid": "06ce8f34-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.191.244.78/linhnhi/luvlinhnhi.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908765, "uuid": "28fb761a-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.226.32:55487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908780, "uuid": "31e2a36b-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.165.80:43381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740908884, "uuid": "70227c72-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.242.93.61:43127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909005, "uuid": "b8602368-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.172.165:59840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909125, "uuid": "ff61eb22-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.7.187:46838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909125, "uuid": "ffc47c22-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.39:38457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909426, "uuid": "b2f5cba9-f74c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.69.26:40819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909484, "uuid": "d5d9f2c1-f74c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.84.176:44522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740909725, "uuid": "651dd960-f74d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.102:42227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910084, "uuid": "3b09d246-f74e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.242.93.61:43127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910085, "uuid": "3bad9070-f74e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.99:42456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910206, "uuid": "83ac387e-f74e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.183.59:41069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910325, "uuid": "caafc818-f74e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.226.32:55487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910506, "uuid": "36d56a3b-f74f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.7.162.117:49870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910762, "uuid": "cf5c410e-f74f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.232.150:37068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740910984, "uuid": "53dfe787-f750-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.172.165:59840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911225, "uuid": "e39611ab-f750-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.139.194:51513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911465, "uuid": "72928270-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.zagyw.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911525, "uuid": "962d9e1e-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.219.157:35705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911585, "uuid": "b9bacfa6-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.87.75:2772/s/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911585, "uuid": "ba1d939e-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.78.37:52659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911588, "uuid": "bbd3a474-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.239.81.65:43424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911593, "uuid": "be8c65bb-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.255:37307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911602, "uuid": "c42915d6-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.54.214:38712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911608, "uuid": "c775b47e-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.189:59971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911613, "uuid": "ca6b935e-f751-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.107.30:42672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740911829, "uuid": "4b874460-f752-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.99.117:46583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912008, "uuid": "b5c986de-f752-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.38.68:52791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912125, "uuid": "fbca3070-f752-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.188.207:52648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912186, "uuid": "1fe10270-f753-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.165.167:44632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912244, "uuid": "42a76da9-f753-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.246:44117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912245, "uuid": "435daa1e-f753-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.7.162.117:49870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912365, "uuid": "8a8e2fe3-f753-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.232.150:37068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912863, "uuid": "b3e0efbb-f754-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.61.191:35553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740912907, "uuid": "cd9e8b67-f754-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.3:35423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913024, "uuid": "13bc64bd-f755-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.219.157:35705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913144, "uuid": "5b2038d5-f755-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.171.20:41675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913204, "uuid": "7f20bc40-f755-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.246:44117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913506, "uuid": "3316fcb3-f756-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.230.241:42400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913685, "uuid": "9d675770-f756-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.24.88:56520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913805, "uuid": "e51ad4b1-f756-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.165.167:44632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740913985, "uuid": "505850e8-f757-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.3:35423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914058, "uuid": "7ba674c9-f757-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.171:52282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914180, "uuid": "c4dbe578-f757-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.137.132:39321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914226, "uuid": "e046839d-f757-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.15.31:35739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914405, "uuid": "4aecc081-f758-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.76.206:56302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914587, "uuid": "b71c4284-f758-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.47.58:53960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914594, "uuid": "bb2bfb71-f758-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.83.42:49812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914646, "uuid": "da49570e-f758-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.47.58:53960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740914736, "uuid": "100eabee-f759-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.145.96:47699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915305, "uuid": "62f75f03-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.122.117:59012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915305, "uuid": "6311810f-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.171:52282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915484, "uuid": "ce188ed1-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.162.244:56481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915512, "uuid": "dece7f34-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.145.96:47699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915544, "uuid": "f19432bd-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.248.219:48322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915559, "uuid": "fac89022-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.62.160:58706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915651, "uuid": "31a5f3ff-f75b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.79.142:45911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915664, "uuid": "394a8007-f75b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.137.132:39321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740915964, "uuid": "ebd18185-f75b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.83.42:49812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "57673329-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "57685e80-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "57686220-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "57686386-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "576a3f48-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "577d86c3-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "577f7b96-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "577f7cd7-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916144, "uuid": "5782612c-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916145, "uuid": "57f394b2-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916204, "uuid": "7af3b4a4-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916263, "uuid": "9e6882e0-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.146.184.61/hiddenbin/trw.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916505, "uuid": "2e401d8a-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.30.252:46341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916505, "uuid": "2ebb6b98-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.24.88:56520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916684, "uuid": "9901aa4c-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.neweb.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916685, "uuid": "99766f56-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.76.206:56302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916750, "uuid": "c07cfe82-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.100.50:42912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740916821, "uuid": "eaad31e6-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.79.142:45911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917001, "uuid": "55fdcb3e-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.168.24:51141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917044, "uuid": "6f9cde6d-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.36.60:34262/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917045, "uuid": "70078501-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.218.46:48211/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917045, "uuid": "70716c89-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.55:49961/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917046, "uuid": "70b7ba01-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.71.85.54:53029/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917047, "uuid": "71b16069-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.141.176:46176/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917048, "uuid": "720ccb6a-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.161.199:33694/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917056, "uuid": "7704138e-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.107:47187/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917063, "uuid": "7ada2c51-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.54.103:53503/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917063, "uuid": "7ae225e0-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.62.240:40033/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917065, "uuid": "7c203934-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.200.98:58137/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917074, "uuid": "81929635-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.98.38.161:59706/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917074, "uuid": "81b8c0b2-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.152.143.75:48376/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917183, "uuid": "c2daef9f-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.75:60685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917344, "uuid": "22ad7d14-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:48558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917344, "uuid": "22bce9ac-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.3.30:49557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917345, "uuid": "23542a21-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.100.142:46012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917346, "uuid": "238a29e6-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.87.75:2772/s/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917360, "uuid": "2bce2ddf-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.51:59314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917361, "uuid": "2c96161c-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.43.146:47691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917768, "uuid": "1f89455d-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.177:50147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917843, "uuid": "4bcd566f-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.176.214:59848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917885, "uuid": "64d5b229-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.162.244:56481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917952, "uuid": "8cbfa0a9-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.59.120.8/files/catlogs/rundrive.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740917954, "uuid": "8dd6eb29-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.59.120.8/files/funny_cat.mp4", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918006, "uuid": "acdc345a-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.59.120.8/files/release/winnet.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918007, "uuid": "adb1b22b-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.59.120.8/files/driver/netdriver.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918007, "uuid": "adb820b3-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.59.120.8/files/video/funny_dog.mp4", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918051, "uuid": "c7ca8348-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.229:44056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918066, "uuid": "d0db5118-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.177:50147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918126, "uuid": "f487cfa6-f760-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.80.189.113:44731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918245, "uuid": "3bb3a557-f761-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.112.40.110:42939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918305, "uuid": "5f07e87c-f761-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.5.145:36853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918424, "uuid": "a660c101-f761-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.100.50:42912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918606, "uuid": "12d9b997-f762-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.126.215.120:16386/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740918784, "uuid": "7d0b82bf-f762-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.15.219:50192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919085, "uuid": "306b8249-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.somiv.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919145, "uuid": "53f3f4cd-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.231:34445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919204, "uuid": "77389c75-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.5.145:36853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919264, "uuid": "9ad8efbd-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.112.40.110:42939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919264, "uuid": "9b208f22-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.229:44056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919264, "uuid": "9b321f86-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.80.189.113:44731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919265, "uuid": "9b83df61-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.180:44564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919324, "uuid": "bef184fe-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.176.214:59848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919340, "uuid": "c87f1046-f763-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.166.49:60051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919505, "uuid": "2aa533ee-f764-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.112:42800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919564, "uuid": "4db6728b-f764-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.11.209:44343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919565, "uuid": "4e1c441c-f764-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.205.71:60099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740919804, "uuid": "dcd9d7d8-f764-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.41.231:34445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920002, "uuid": "5307526a-f765-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.175.160:36147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920261, "uuid": "ecf7ea90-f765-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.255.236:39401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920645, "uuid": "d1cd4a94-f766-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.44.112:42800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920721, "uuid": "ff77da9c-f766-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.186.1.158:55395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "19a1918d-f767-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.87.75:2772/s/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "19a19345-f767-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.87.75:2772/s/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920765, "uuid": "19b4fc5e-f767-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.87.75:2772/s/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920825, "uuid": "3d5b5c31-f767-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.220:40075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740920886, "uuid": "617bfbd5-f767-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.255.236:39401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921664, "uuid": "3189ddc1-f769-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.29:53819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921665, "uuid": "320242ba-f769-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.170.56:48841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921725, "uuid": "55c765ba-f769-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.242.165:47826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740921908, "uuid": "c311785c-f769-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.43.185:43529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922085, "uuid": "2c9d2d4c-f76a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.14.220:40075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922446, "uuid": "03c80997-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.217.29:60300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "269c8f31-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.151/1337Traget/1337X-1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "26cfa50c-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.202.233.169/Tak/Reg/Marz/DHRAD/FLZ/dllG.txt", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "26e01437-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.151/1337/TORRENTOLD-1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "26e5779f-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.215.85.11/15f869479d73f92a/freebl3.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "26f162e1-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.202.233.169/Tak/Reg/Marz/ENVS/DZ.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922505, "uuid": "26f5b12a-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.202.233.169/Tak/Reg/Marz/DRG/RTC/AB/f3.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922506, "uuid": "271a1f02-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.215.85.11/15f869479d73f92a/sqlite3.dll", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922506, "uuid": "2771aae2-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.202.233.169/Tak/Reg/Marz/DRG/RTC/AC/Pef3.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922507, "uuid": "27b35d3a-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.202.233.169/Tak/Reg/Marz/ENVS/DR1.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740922805, "uuid": "d943c460-f76b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.43.185:43529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923059, "uuid": "71129387-f76c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.186.1.158:55395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923112, "uuid": "906ec2f9-f76c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.251:42984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923164, "uuid": "af79b160-f76c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.86:48486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923465, "uuid": "6318aa71-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/Plugins/cred64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923465, "uuid": "632f181a-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/Plugins/clip64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923465, "uuid": "632fae6b-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/Plugins/clip.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923471, "uuid": "66a32df6-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/Plugins/cred.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923546, "uuid": "92ef1415-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.191.57:41607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923584, "uuid": "a9e15dcc-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://objectstorage.ap-seoul-1.oraclecloud.com/n/id0cu93izlqm/b/verbuck/o/have-to-pass.html", "Tag": [ { "name": "tag:captcha", "colour": "#e39f07", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923584, "uuid": "a9e39f5d-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.242.165:47826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923584, "uuid": "aa059c6c-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://objectstorage.us-ashburn-1.oraclecloud.com/n/id0cu93izlqm/b/huhu/o/browser-verification-re.html", "Tag": [ { "name": "tag:captcha", "colour": "#e39f07", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923585, "uuid": "aaac4400-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://uploadhaven.store/ewest.m4a", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923586, "uuid": "ab55d4d3-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://buckfresh.oss-ap-southeast-1.aliyuncs.com/webogramload.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923610, "uuid": "b932a32c-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.97:53135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923765, "uuid": "15ef9242-f76e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.112.72:42804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740923825, "uuid": "3990dbf3-f76e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.132.66:43317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740924323, "uuid": "6268678a-f76f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.103.166:43668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925025, "uuid": "04e9468f-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.132.66:43317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925205, "uuid": "70333ab8-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.226:49809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925206, "uuid": "709c3365-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.44.115:54070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925206, "uuid": "70d3d260-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.192.169:41317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925206, "uuid": "70d4047a-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.103.41:56132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925217, "uuid": "7749636e-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.25:39365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925251, "uuid": "8b69d4b0-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.52.79:36632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925264, "uuid": "92eeb91f-f771-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.112.72:42804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925522, "uuid": "2d095eaf-f772-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.113.109:35966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925522, "uuid": "2d391824-f772-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.64:54218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740925925, "uuid": "1d246307-f773-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.65:58437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926284, "uuid": "f3523c85-f773-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.44.115:54070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926463, "uuid": "5dc56502-f774-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.118:44946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926706, "uuid": "ee84247c-f774-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.103.41:56132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740926826, "uuid": "360c644b-f775-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.183.73:48203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927425, "uuid": "9b052a3a-f776-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.51.184:38143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927484, "uuid": "be936c58-f776-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.211.206:51055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927904, "uuid": "b8e3c7b6-f777-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:41420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740927968, "uuid": "dec027b7-f777-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.73.23:36230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928444, "uuid": "fa7bafc0-f778-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928625, "uuid": "66b3db25-f779-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.wezop.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928692, "uuid": "8e345f2f-f779-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.252:50205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928805, "uuid": "d2135300-f779-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.50.233:47646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740928863, "uuid": "f478a351-f779-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.73.23:36230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929043, "uuid": "5ff5305e-f77a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.183.73:48203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929181, "uuid": "b1eaccd6-f77a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.135:49896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929237, "uuid": "d359b736-f77a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.121.0.70:53449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929406, "uuid": "37d36cc5-f77b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.230.241:42400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929765, "uuid": "0e100551-f77c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.123.114:40383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929884, "uuid": "55309ee3-f77c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:41420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740929885, "uuid": "55cb3dc7-f77c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.243:54965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740930304, "uuid": "4f785668-f77d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.50.233:47646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931103, "uuid": "2b551db7-f77f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.78.170:47917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931624, "uuid": "624028ce-f780-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.31.61:49621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931864, "uuid": "f0da67a7-f780-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.105.123:40790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931864, "uuid": "f0f196f0-f780-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.12:52522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740931925, "uuid": "15b4ee3d-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.14.236.29:55925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932104, "uuid": "8004549f-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.129.244:41227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932105, "uuid": "80cf9f7b-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.251.52:54412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932105, "uuid": "80de08e0-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:48558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932105, "uuid": "80f144a4-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.27.237.139:58117/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932106, "uuid": "8132513d-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.141.32.89:32883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932106, "uuid": "818ee465-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.152:50545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932129, "uuid": "8ef9476e-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.59.228:39133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932226, "uuid": "c8ed5e4a-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.128:51608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932285, "uuid": "ec07bcb4-f781-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.78.170:47917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740932898, "uuid": "598debf5-f783-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.123.97:57252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933064, "uuid": "bc25f521-f783-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.31.61:49621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933065, "uuid": "bd10fec4-f783-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.12.192:35834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933186, "uuid": "053ced9c-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.12:52522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933245, "uuid": "281827b4-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.128:51608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933425, "uuid": "936f0c04-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.14.236.29:55925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933485, "uuid": "b722c700-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.105.123:40790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933545, "uuid": "db248b26-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.72.155:57032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933605, "uuid": "fef9b520-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.108.190:34523/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff8a2230-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff8c2cd3-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff8de307-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff8e6bdd-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff90bfd3-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff97af10-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff97b140-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff97e1ed-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff9a85f6-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff9bb945-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ff9d22a2-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933606, "uuid": "ffa00052-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933607, "uuid": "ffc55366-f784-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/z0r0.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933607, "uuid": "000e1dca-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.161.34:55073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933663, "uuid": "211fe984-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/Video.lnk", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933663, "uuid": "212ff4d1-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/AV.lnk", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933663, "uuid": "21363905-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/Photo.lnk", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933665, "uuid": "22cd0bca-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/Photo.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933667, "uuid": "2398b1b7-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/info.zip", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933668, "uuid": "24597bf7-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/info.zip", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933669, "uuid": "24b603e6-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/AV.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933669, "uuid": "24bd358d-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/x0ox0ox0oxDefault/Video.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "46324e4b-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "4632615c-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "46379d51-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "463e6710-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "464094f7-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "467b5109-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "467b5525-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "467b6443-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "467b6fbf-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "4684b358-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "469708d4-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933725, "uuid": "46970b93-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933726, "uuid": "46f5ff5a-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Yboats.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933784, "uuid": "69ad27df-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933784, "uuid": "69bf5e0b-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/ftp.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933784, "uuid": "69c2ddbc-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/basic", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933785, "uuid": "69fc7020-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Video.lnk", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933785, "uuid": "6a011c62-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Photo.lnk", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933785, "uuid": "6a07d92d-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/AV.lnk", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933785, "uuid": "6a3c6472-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/bhw", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933786, "uuid": "6a716556-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/zeros6x.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933790, "uuid": "6cf3398c-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Photo.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933790, "uuid": "6d1b2401-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/Video.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933792, "uuid": "6e238a0c-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.230/AV.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740933907, "uuid": "b2c54bbc-f785-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.123.97:57252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934391, "uuid": "d37d227e-f786-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.135:49896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a608a9ee-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a61be154-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a61fe95c-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a62edee2-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a6437979-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a661c0e1-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.42.189:52102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934745, "uuid": "a69754d2-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "c9f21d48-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "c9f5a997-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934805, "uuid": "ca24c088-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740934863, "uuid": "ec9874fb-f787-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.206.67/bins/sora.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935165, "uuid": "a0831d17-f788-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.54:44475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935464, "uuid": "53046c8f-f789-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.170.161:32809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935549, "uuid": "854b6dd3-f789-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.128.102:53427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935827, "uuid": "2b8a88eb-f78a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.5.203:45218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740935948, "uuid": "734826c1-f78a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/g24pizl2oxncezn/linkin_park.mp3/file", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936243, "uuid": "23758cf3-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.219.181.231/c2/load.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936244, "uuid": "23e7876b-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.219.181.231/c2/bin.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936307, "uuid": "49653abd-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.19.109:43213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936544, "uuid": "d6827b14-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.39:54145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740936844, "uuid": "898cd9a8-f78c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.170.161:32809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937205, "uuid": "60b0edda-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.50.89:46661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937264, "uuid": "83f0912e-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.39:54145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "8438e85a-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "8438f8d2-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "843905b4-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "84390b8f-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "843cc3d4-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "843de80d-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "84403c26-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "8441a159-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "84446f57-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "8445c2cc-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "845423a7-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "845580b5-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "845a333d-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.148.177.37/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "847c7582-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.152:50545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937265, "uuid": "847fb5fa-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.23.144:53325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937270, "uuid": "876e92c4-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.62.175:41765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937385, "uuid": "cbf70a36-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.57:33732/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937458, "uuid": "f78c1a00-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.66.191:58314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f316773-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmym86k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f39b344-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmysparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f3bd39d-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmymips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f3bff5f-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmyarmv4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f42ae51-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmypowerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f45bbec-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmysh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f498c34-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmyx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f4d0211-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmyarmv6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937686, "uuid": "7f6ff04f-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmyarmv5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "a2344e82-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.22:50415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "a26da000-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmyi686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "a27093fa-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmyi586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "a2941b51-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.154.224.116/jackmymipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937745, "uuid": "a2a26cf1-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.13.178:54834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740937805, "uuid": "c669a7c9-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.jaxim.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938106, "uuid": "79d564c2-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/bins.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938126, "uuid": "857b6d01-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmyx86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938126, "uuid": "85a78a4f-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmyarmv5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938126, "uuid": "85a7a69f-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmysh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938126, "uuid": "85d11f33-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmymipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938127, "uuid": "85ef25fb-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmysparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938127, "uuid": "85ff02b8-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmymips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938127, "uuid": "86013c1c-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmyarmv4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938127, "uuid": "8673535f-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmypowerpc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938128, "uuid": "86af47ff-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmyi686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938133, "uuid": "89b69ae8-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmyi586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938133, "uuid": "89b69b67-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmyarmv6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938133, "uuid": "89bb92e3-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://dianzanla.com/jackmym86k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938285, "uuid": "e40fe6e0-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "e4a38cfa-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.180:44564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "e4b908a9-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "e4ba0070-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938286, "uuid": "e4c4f1a8-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e5458f78-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e569a2c5-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e56ee119-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e56f0305-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e58e5b5b-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e58e60a2-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938287, "uuid": "e590233f-f78f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.84.254/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938344, "uuid": "0775ba3b-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938344, "uuid": "0779c12a-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938344, "uuid": "077c7a88-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938344, "uuid": "077ed000-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938345, "uuid": "07debb56-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938346, "uuid": "086d162f-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938346, "uuid": "0870291a-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938346, "uuid": "08703428-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938346, "uuid": "0872b8b9-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938346, "uuid": "08e8ebd6-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938405, "uuid": "2be60ff8-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://botnet.0x503.org/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938472, "uuid": "5404e03a-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.140.51:50318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938585, "uuid": "97232008-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.62.138.215:47573/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938585, "uuid": "97384743-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.122.179:35189/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938586, "uuid": "978f8441-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.56.21:45907/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938589, "uuid": "9995ac7a-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.146:55602/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938589, "uuid": "99c27f2c-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.181.84:36157/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938590, "uuid": "9a17b15d-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.127.29:52456/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938594, "uuid": "9c825f40-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.158.97.141:49445/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938598, "uuid": "9f27b0bb-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.185.79:35009/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938608, "uuid": "a524d42c-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.180:55098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938613, "uuid": "a7efcf26-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.200:11371/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938613, "uuid": "a81404db-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.144:10471/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938614, "uuid": "a82b187a-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.125.29:51734/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938614, "uuid": "a838df00-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.50.182.23:38722/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938614, "uuid": "a8661b3d-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.41.211:46234/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938618, "uuid": "ab03057b-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.4.160:47152/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938618, "uuid": "ab0abddd-f790-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.107:54799/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740938766, "uuid": "02ecbd17-f791-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.22:50415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740939005, "uuid": "91689053-f791-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.66.191:58314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740939663, "uuid": "19cc6969-f793-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.58:46213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740940262, "uuid": "7ece655d-f794-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.gykem.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740940385, "uuid": "c8159f06-f794-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.229.52:58423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740940863, "uuid": "e4e74a19-f795-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.58:46213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740940863, "uuid": "e4f323cd-f795-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.247:38362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740940985, "uuid": "2db31b5d-f796-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.80.215:55779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740941344, "uuid": "03f0922b-f797-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.108.190:34523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740941345, "uuid": "045ced3a-f797-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.246.100:49826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740941466, "uuid": "4c1beabc-f797-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.201.38:44176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740941644, "uuid": "b69fe78c-f797-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.229.52:58423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740941884, "uuid": "45b710f5-f798-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.246.100:49826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740942425, "uuid": "87d0079a-f799-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.245.15:37547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740942484, "uuid": "ab0c947e-f799-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.103.206.142:50715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740942545, "uuid": "cf47332f-f799-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.142.132:53404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740942797, "uuid": "65725f25-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.215.115:33125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740942847, "uuid": "839b7f66-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaultcord.net/assets/captcha.exe", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943024, "uuid": "ed47db45-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.103.206.142:50715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943025, "uuid": "edbc2a38-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.221.82.90:55230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943053, "uuid": "fe10ca2c-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.176.64.237:60507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943053, "uuid": "fe673411-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.94.215.30:47812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943144, "uuid": "34a37d61-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.239/tarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943144, "uuid": "34a445ff-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.239/tmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943144, "uuid": "34a447d5-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.239/tarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943144, "uuid": "34a44f65-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.239/tmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943144, "uuid": "34a46154-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.239/tarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943144, "uuid": "34b35231-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.239/tsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943206, "uuid": "5934195b-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaultcord.net/assets/cf.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943264, "uuid": "7bf7501b-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.80.215:55779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943563, "uuid": "2e75ceb5-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.142.132:53404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943626, "uuid": "53a4bef8-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.242.153:34423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943641, "uuid": "5ceb5e07-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.169.10:51619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943684, "uuid": "765108a0-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.146.62.232/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943685, "uuid": "76b5cc5e-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://159.65.219.206/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943685, "uuid": "76c61029-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.5.32.73/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943685, "uuid": "76d0e0a0-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://82.146.62.232/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943685, "uuid": "76d56406-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://163.5.32.73/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943685, "uuid": "76f13d30-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.101.61:36370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943686, "uuid": "776f645d-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.93.118.165/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943744, "uuid": "99ee019c-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.93.118.165/recaptcha-verify", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943746, "uuid": "9b1705fe-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.219.206/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943746, "uuid": "9b24e3c4-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.82:58165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943747, "uuid": "9be454a6-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://banappeals.net/GlobalDesk.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943751, "uuid": "9e93842f-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.221.82.90:55230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943806, "uuid": "bf3784a5-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.123.165:49752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943866, "uuid": "e2e1e0b7-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.100.146:35924/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943924, "uuid": "059c7552-f79d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://banappeals.net/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943988, "uuid": "2b799993-f79d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://163.5.32.73/GlobalDesk.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740943988, "uuid": "2b79b11a-f79d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.5.32.73/GlobalDesk.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944170, "uuid": "9814a3e5-f79d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.77.133:41171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944199, "uuid": "a94abfe3-f79d-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.215.115:33125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944524, "uuid": "6b067096-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.82:58165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944530, "uuid": "6e5ac700-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.86.161.162:41135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944724, "uuid": "e255753d-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.110:42450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944764, "uuid": "fa66604f-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.99:52392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944948, "uuid": "67ca3371-f79f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:38712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740944969, "uuid": "7421192c-f79f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.101.105:35806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945006, "uuid": "8a240e76-f79f-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.11.151:48584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945313, "uuid": "411a0714-f7a0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.186.123:59984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945366, "uuid": "60a724dd-f7a0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.249.28:41960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945633, "uuid": "003b27d7-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.128.102:53427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945665, "uuid": "13132b17-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.136.118:48127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945862, "uuid": "88bce053-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.110.26:41982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740945905, "uuid": "a20660a4-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.27:51158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946026, "uuid": "ea5b1b65-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.110:42450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946144, "uuid": "30c846d9-f7a2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.101.105:35806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946265, "uuid": "78868f7e-f7a2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.123.165:49752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946505, "uuid": "07df9193-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.27:51158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946625, "uuid": "4f8f33b4-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://immo-etoiles.fr/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946626, "uuid": "4fcdd150-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.fastfreight-loads.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946626, "uuid": "4ff53987-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.99:52392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946626, "uuid": "4ff65c9f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://my.salviatech.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946626, "uuid": "501415f7-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-yoda.blog/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946627, "uuid": "507ce49a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.cambodiatouristservice.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946627, "uuid": "50ceec98-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.ningbocrm.jintsume.net/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946629, "uuid": "51d59899-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpchtaverification2024.pages.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "52285261-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://laborpartyjo.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "522dcd12-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://deturistaenjapon.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "5239377f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://l1nxx.para.rip/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "526877ca-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.thesignaturemag.salviatech.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "527b571a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.carrierlinker.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "528f41ad-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.fastfreightloads.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946630, "uuid": "528f4bd6-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.test.peperoncinochepassione.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "52b34e42-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.laborpartyjo.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "52b3500a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://misano.gestroom.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "52c67695-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.kevinzhangadmin.jintsume.net/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "52d811cc-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://bmdcompany.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "52d82489-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://facturacio.titoworld.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "52dae524-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://recaptcha.dpk-its-cl03.agoracalyce.net/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "5313f357-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://aromadecore.in/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "531419b2-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zamilgroups.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "531d8e2b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.sis.houseforma.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "533a765f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://central2.grupocasaus.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "533a8fce-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mulleder.pages.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "533c6011-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://sales.mypetapp.co.za/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946631, "uuid": "533caccb-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://lucprofessional.grupomoltz.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "533cf3a2-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://carrierlinker.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "533db108-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://website.mypetapp.co.za/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "53539ca4-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.evaluanom035.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "5353a921-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxyyy.pages.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "53659d1e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastfreightloads.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "538788ef-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://ningbocrm.jintsume.net/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "53879d89-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://sites-6bx.pages.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "53c84669-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://horno-rafelet.es/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "53cacd92-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.ningbocrm.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946632, "uuid": "53ce66c1-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://capchtaverification2024.pages.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946633, "uuid": "53d84c74-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.bratusferramentas.grupomoltz.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946633, "uuid": "53eb1532-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://ifuckyourpc.win/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946633, "uuid": "542963c3-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://verify.mod-defence-lk.workers.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946633, "uuid": "5467efc2-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.immo-etoiles.fr/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946635, "uuid": "5516d6d1-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastfreight-loads.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946635, "uuid": "5553c827-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://wingsaviationacademy-in.salviatech.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946635, "uuid": "5554919f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.wingsaviationacademy-in.salviatech.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946635, "uuid": "556a00d5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://thesignaturemag.salviatech.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "55aa1803-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.finocci.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "55b5256e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://wingsaviationacademy.in/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "55bb7333-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.website.mypetapp.co.za/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "5630e9f5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev.gestroom.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "56337945-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.lucprofessional.grupomoltz.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946636, "uuid": "563405fa-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://toulon-united.fr/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "563c6aa5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.titrans-cd.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "56449a44-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.laborpartyjo.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "564f8f4b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mine.moroccoex.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "56630f36-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://finocci.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "56631fd4-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://crimson-sun-3ac5.foxiproxi.workers.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "5663260e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.amun.jintsume.net/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946637, "uuid": "5677a93e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.houseforma.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946638, "uuid": "56d518eb-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.first-security-verden.de/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946638, "uuid": "56eb9c15-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://zamilgroups.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946638, "uuid": "56eb9deb-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://user.mypetapp.co.za/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946638, "uuid": "5700fda8-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://titrans-cd.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "576c78ad-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.cambodiatouristservice.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "576cb2a5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://lnk1man.pages.dev/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "577dffed-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.user.mypetapp.co.za/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "57e0dfe3-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.gestroom.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "57e0eab0-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://test.peperoncinochepassione.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "57f3fc3c-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://first-security-verden.de/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "57f3fdda-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://gestroom.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "57f557aa-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.sales.mypetapp.co.za/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946639, "uuid": "57f569e8-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://lucprofessional.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946640, "uuid": "582a355e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.lucprofessional.com.br/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946640, "uuid": "582a39fe-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.finocci.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946640, "uuid": "582baa11-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://kevinzhangadmin.jintsume.net/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946640, "uuid": "582bb65a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://cambodiatouristservice.com/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946640, "uuid": "589406c5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.gestroom.it/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946744, "uuid": "960d092b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.42.87:40596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946744, "uuid": "9665665b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.40.207:38712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946751, "uuid": "9a4f7ee5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.86.161.162:41135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946805, "uuid": "ba736cec-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.185.80.111:8080/parts/form%20i-4283.pdf.lnk", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946805, "uuid": "ba7ed2a6-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://firsteviewer.com/parts/form%20i-4283.pdf.lnk", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946806, "uuid": "bb00bb76-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.185.80.111:8080/part/setup5168.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946806, "uuid": "bb2ba78a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://firsteviewer.com/part/setup5168.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "01ee38f3-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://elnas.com/verify/index.html", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "01efaf9e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.alphaplumbingfw.com/verify/index.html", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "021b40dc-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://riverview-pools.com/verify/index.html", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "0223ef2f-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://barefootpilateslb.com/up/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "022b7c34-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.freshtubs.com/verify/index.html", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "022bc401-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://iconichomestudios.com/up/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "0230b141-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.pointtohealth.com/WP/verify/index.html", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "023a3308-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://zettagc.com/up/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "0242b925-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://livemap-trucks.com/login/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "0243cf63-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://blessdayservices.org/up/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "02488aef-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://livemap-loads.com/login/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "024e576a-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://drmarlenemd.com/v/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "024faf5e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.gemrazorback.com/up/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "025225e8-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://jessespridecharters.com/v/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946925, "uuid": "025d3fb3-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.livemap-trucks.com/login/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946926, "uuid": "02ed1f99-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.livemap-loads.com/login/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "25ad0920-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.142.122/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "25af0ea8-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.130.31/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "25b7a803-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.159.16/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "262d3416-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.142.230.181:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946985, "uuid": "26309f3d-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.143.17.131:10000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946986, "uuid": "265a98d6-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.206.163:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946986, "uuid": "265aab65-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.226.148:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946986, "uuid": "265aff09-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.40.118.98:8001/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946986, "uuid": "267991af-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.200.14.126:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946986, "uuid": "26c90b1a-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.127.246.238:9000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946986, "uuid": "26cea021-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.160.25.88:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946987, "uuid": "26ef9796-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.194.85:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946987, "uuid": "270f87e1-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.227.69.237:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946987, "uuid": "27125a34-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.244.157.246:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946992, "uuid": "29ea1fec-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.227.69.237:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740946994, "uuid": "2b12136c-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.74.58.206:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947106, "uuid": "6dd01e6e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.249.28:41960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947283, "uuid": "d75f9a1e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.169.70:45874/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947285, "uuid": "d8fea881-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.148.192.46:3679/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947286, "uuid": "d929cde8-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.180.141.233:6890/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947286, "uuid": "d940b26f-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.97.28.221:14479/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947286, "uuid": "d94388fd-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.94.155:4840/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947286, "uuid": "d958783e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.87.155.56:21858/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947286, "uuid": "d9a2b26c-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.148.192.45:3679/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947286, "uuid": "d9a30185-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.148.192.44:3679/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947287, "uuid": "d9c6fd7e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.131.156:49501/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947287, "uuid": "d9eddd4d-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.169.244.129:25252/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947287, "uuid": "d9f97b0f-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.78.194:41954/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947287, "uuid": "da19db5d-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.78.243:35719/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947288, "uuid": "da594031-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.16.221.246:40638/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947288, "uuid": "daae4472-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.52.36.129:40486/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947298, "uuid": "e05790e0-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.129.104:34289/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947346, "uuid": "fd04dba0-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.48.186.195:53089/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947405, "uuid": "2035dda7-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.8.107:52751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947411, "uuid": "23e6a4df-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.6.200:49598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947532, "uuid": "6c03b2d3-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://prove-wrapping-mr-cached.trycloudflare.com/83HJS84028437483921982382/83HJS84028437483921982382.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "trycloudflare", "colour": "#5a6d94", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947585, "uuid": "8baac4a2-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.14.170:33893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947646, "uuid": "afe9af54-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.170.37:38228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947774, "uuid": "fc60d7a0-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.203.240.78/twonelf.rar", "Tag": [ { "name": "pw-poiuytrewq1234", "colour": "#ce2315", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947781, "uuid": "007be0dc-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.61.86:35084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947884, "uuid": "3e0a11d7-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.221.131:58023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740947943, "uuid": "60f5f5c6-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.wygoq.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948024, "uuid": "910edd4c-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.248.193:55599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948064, "uuid": "a951ee4b-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.8:52608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948244, "uuid": "1460ae4a-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://madebyintelbroker.pages.dev/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948305, "uuid": "38711923-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.110.26:41982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948364, "uuid": "5bde92c0-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://paulinatajda.com/sa.txt", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#719F48", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948364, "uuid": "5c06a6fe-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.71.146:33950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948365, "uuid": "5c315ee5-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://joahhilperic.net/1-234882323/index.html", "Tag": [ { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948426, "uuid": "8112f158-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://paulinatajda.com/1-8123718/839492384932-james.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dllHijack", "colour": "#719F48", "exportable": true, "hide_tag": false }, { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "IDATLoader", "colour": "#04280F", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948428, "uuid": "81e00027-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.41.78.57:8080/reCAPTCHA.exe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948664, "uuid": "0efb3935-f7a8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.223:49514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740948848, "uuid": "7c6f14a2-f7a8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.155.178:50315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949024, "uuid": "e53ae62e-f7a8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.61.86:35084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949084, "uuid": "08fadaf6-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.6.200:49598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949144, "uuid": "2cff9471-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.153.79.9/helper.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949159, "uuid": "35bb5185-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.153.79.9/start.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949206, "uuid": "51ed4258-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.89:39916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949209, "uuid": "53412f2e-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.48.4:8000/har", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949325, "uuid": "98a691ef-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.8:52608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949443, "uuid": "df09983f-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.90.40:60464/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949444, "uuid": "df61d98d-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.77.218:35530/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949446, "uuid": "e09d9b72-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.79.72:49024/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949446, "uuid": "e0c6026a-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.142.215.155:32916/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949449, "uuid": "e271ce9f-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.247.54.94:59063/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949459, "uuid": "e852d575-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.170.46:49290/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949463, "uuid": "eb16bf68-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.48:51534/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949473, "uuid": "f0d15398-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.171:54314/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949473, "uuid": "f0d3f0b7-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.21.160.214:39359/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949473, "uuid": "f0d443eb-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.90.65:52315/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949473, "uuid": "f0f618cc-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.152.254.38:56904/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949473, "uuid": "f0f763de-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.159.114:40333/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949473, "uuid": "f124c9e1-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.125.86:35022/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949475, "uuid": "f237b76e-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.163.21:49816/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949684, "uuid": "6eea8641-f7aa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.14.170:33893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949744, "uuid": "9297f3e1-f7aa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.194.152:36820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949865, "uuid": "da75da8b-f7aa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.71.146:33950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949866, "uuid": "dae77aa7-f7aa-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.97.166:45955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949985, "uuid": "221144a6-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.155:51727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740949986, "uuid": "2297e16e-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.54.76:55361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950045, "uuid": "45ae5b3f-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.232:54353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950166, "uuid": "8e417a6e-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.145:54280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950225, "uuid": "b16d4a7f-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://inzbdex.xyz/new.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950226, "uuid": "b17ec510-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.172.154/new.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950226, "uuid": "b1914d51-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.172.154/admintemp.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950226, "uuid": "b1a31448-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://inzbdex.xyz/admintemp.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950229, "uuid": "b3a87c86-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://inzbdex.xyz/XRBNPOPD.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950230, "uuid": "b3ec0b7d-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.172.154/XRBNPOPD.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950266, "uuid": "c9b705f8-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.172.154/screenconnect/portal.control.trace.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950271, "uuid": "cc7c2f53-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://inzbdex.xyz/screenconnect/portal.control.trace.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950344, "uuid": "f7d3cf1e-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com/new.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950344, "uuid": "f7ee63f1-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com/admintemp.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950347, "uuid": "f9b9ef7f-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com/XRBNPOPD.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950364, "uuid": "03ea4d22-f7ac-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com/screenconnect/portal.control.trace.apk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950464, "uuid": "3f931299-f7ac-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.223:49514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950645, "uuid": "ab4def0c-f7ac-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.89:39916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950912, "uuid": "4ad9b368-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.174.185.168:34334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950912, "uuid": "4ada379a-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.33.30:42782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950912, "uuid": "4ada7f85-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.247.108.221/hiddenbin/boatnet.spc", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950912, "uuid": "4ada80a0-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.247.108.221/hiddenbin/boatnet.m68k", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950912, "uuid": "4adadd19-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.20.215:46884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950945, "uuid": "5e41696e-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.236.133:57497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740950947, "uuid": "5f7c279d-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.12.155.178:50315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951004, "uuid": "818d7160-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/off.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951004, "uuid": "819414b8-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/obfuscated25.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951004, "uuid": "81943ace-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/totallysafe1.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951004, "uuid": "819833df-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/totallysafe.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951004, "uuid": "8198452b-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/crypt.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951004, "uuid": "81ab679c-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/totallysafe2.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951005, "uuid": "823c1c81-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/stage1.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951005, "uuid": "823ceb33-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.97.166:45955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951006, "uuid": "825db706-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.49.248.241/totallysafe.msi", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951245, "uuid": "1109156e-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.145:54280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951306, "uuid": "353e15d1-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.136:59415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951306, "uuid": "35a6f5db-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.144.187:58462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951363, "uuid": "57631e91-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.133.119:42715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951363, "uuid": "57662731-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.8.114:51553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951379, "uuid": "60b9329c-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.58.80:38039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951506, "uuid": "ac78ea61-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.242:33400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951548, "uuid": "c5d61770-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.162:48625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951861, "uuid": "800354cb-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.91:55354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740951965, "uuid": "be4976ee-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.77.240:51003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952025, "uuid": "e2280edb-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.11.151:48584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952027, "uuid": "e3156b88-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.21.93:49322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952040, "uuid": "eb2ab373-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.23:42993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952143, "uuid": "2893b11e-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/poc.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952144, "uuid": "2926ac63-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/shell.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "29741fe7-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/demon.x64.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "298681cc-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/demon.x64.exe.dll", "Tag": [ { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952145, "uuid": "29bf8630-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/shellcode.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952170, "uuid": "389792c7-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/fscan", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952174, "uuid": "3affe2d0-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.114.193.75/fscan.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952264, "uuid": "7096b484-f7b0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.144.187:58462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952864, "uuid": "d60d2153-f7b1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.233.1:45164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740952986, "uuid": "1e8b170f-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.35.206:55346/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953044, "uuid": "4196a5c5-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.12.172:57831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953163, "uuid": "88835389-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.67:60986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953224, "uuid": "ace4e14f-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.60.91:55354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953289, "uuid": "d3321fa8-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.248.94:54838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953345, "uuid": "f4c9778e-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.131.6:48531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953358, "uuid": "fc9c64d2-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.123.198:40224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb5fe492-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/7.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb69dac5-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/Pidrozka_shevchenko3.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb6a5d59-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/Pidrozka5.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb6aa8a3-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/3.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb6e4e9b-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/Pidrozka_shevchenko.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb72224c-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/example5.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb72916b-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/Pidrozka_shevchenko2.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb761a3d-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/shevigor.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953705, "uuid": "cb893b3b-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.228/Documents/2.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953722, "uuid": "d5396b78-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.96.88:38613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953766, "uuid": "efe374e8-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://shevchenkoevent.com/files/1.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953767, "uuid": "f0858935-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://shevchenkoevent.com/files/4.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953825, "uuid": "12b91eb7-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.21.93:49322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953884, "uuid": "365522f5-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.253:57460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "59d630e8-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.61.101/Documents/setup.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "59d99567-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.61.101/Documents/setup1.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "59e1a249-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.61.101/Documents/fileSetup.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953944, "uuid": "59efca96-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.61.101/Documents/file.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740953945, "uuid": "5a2dac63-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.133.61.101/Documents/hyhyhy.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954043, "uuid": "94e5eb2b-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.50.31:42971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954187, "uuid": "ead2dcd7-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://jrjonesolicitors.com/Documents.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954246, "uuid": "0db442d7-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.12.127.231/Documents/Case.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954484, "uuid": "9b9c856c-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.46:58658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954485, "uuid": "9c2341a6-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.123.198:40224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954545, "uuid": "bfc980e1-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.12.172:57831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954665, "uuid": "07671161-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.107.112/Documents/Taxdocuments24.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954665, "uuid": "076e5858-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.83.179/Documents/RTSAging.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954665, "uuid": "077629c2-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.107.112/Documents/Complete.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954668, "uuid": "092a4bfe-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://rtsfinancal.com/114.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954725, "uuid": "2b9d1dbe-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://abington-atppa.org/1/Test.mp4", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740954904, "uuid": "9651a016-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.77.159:54495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955025, "uuid": "de3f1c1f-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.50.31:42971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955025, "uuid": "de659442-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.150.120:49453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955085, "uuid": "01cd54f5-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.91:47002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955204, "uuid": "490a9894-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.67:60986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955265, "uuid": "6d2c026b-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.214:36749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955327, "uuid": "91e0fad7-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.36.127:48048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955506, "uuid": "fcbedf6d-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.194.152:36820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955506, "uuid": "fcd8e83f-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.100.200:51007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955625, "uuid": "4381dc30-f7b8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "https://check.tubyf.icu/gkcxv.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955684, "uuid": "670b85aa-f7b8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.77.159:54495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955864, "uuid": "d26112ab-f7b8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.46:58658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955925, "uuid": "f683e1c7-f7b8-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.36.127:48048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740955984, "uuid": "19b27a2a-f7b9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.191.65:57143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956346, "uuid": "f13faeb9-f7b9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.32.130:51068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956347, "uuid": "f26c2f0c-f7b9-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.49:39341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956465, "uuid": "3833dfed-f7ba-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.94.67.51:53475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956645, "uuid": "a37a43aa-f7ba-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.112:37838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740956646, "uuid": "a480df00-f7ba-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.170.28:4245/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957005, "uuid": "7a217dc6-f7bb-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.100.200:51007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957185, "uuid": "e55c6fc7-f7bb-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.94.67.51:53475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957185, "uuid": "e5983a98-f7bb-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.210.23:41031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957384, "uuid": "5c79e928-f7bc-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.29:47598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957484, "uuid": "9810dc77-f7bc-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.49:39341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957485, "uuid": "98645719-f7bc-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.179:35514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957726, "uuid": "27e85ba1-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.107:54423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957845, "uuid": "6f4abaa1-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.164:36696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740957964, "uuid": "b623149b-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.248.94:54838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958024, "uuid": "d9c085f9-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.112:37838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958026, "uuid": "daba48c0-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.209.171:41722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958144, "uuid": "216608ba-f7be-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.85:41491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958324, "uuid": "8cbc50c0-f7be-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.70:35200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958470, "uuid": "e3490198-f7be-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.171.195:57159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958583, "uuid": "26dab81f-f7bf-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.87.159:45601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958685, "uuid": "63633af4-f7bf-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.210.23:41031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740958685, "uuid": "639f4003-f7bf-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.164:36696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740959225, "uuid": "a5b30964-f7c0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.133:42418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740959227, "uuid": "a6ad3585-f7c0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.186.39.224:43403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740959295, "uuid": "cf3095e5-f7c0-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.6.72:41342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740959526, "uuid": "58c571e0-f7c1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.66.93:39538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740959585, "uuid": "7be1d850-f7c1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.170.37:38228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1740959644, "uuid": "9f358085-f7c1-11ef-a1f3-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.55.70:35200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925203, "uuid": "6ec9de7a-f771-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.103.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d702c909-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.131.156", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878342, "uuid": "53cdfce4-f704-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.132.56", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920823, "uuid": "3be2af96-f767-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.14.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740912122, "uuid": "fa38f190-f752-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.188.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936243, "uuid": "232dfc5d-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.219.181.231", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894483, "uuid": "e83d7915-f729-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.69.24.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918242, "uuid": "3a01d27e-f761-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.112.40.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "960363f5-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.158.97.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1de64b-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.199.200.98", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "960422ac-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.203.72.146", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c3e7bd-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.114", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c40e42-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.78", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "9603ea12-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.125.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee6c286-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.247.54.94", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e22494-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.98.36.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1d10fe-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.98.38.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884583, "uuid": "db2f0e76-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.154.83.45", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938461, "uuid": "4d6f1fda-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.41.140.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937262, "uuid": "82599816-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.148.177.37", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928442, "uuid": "f985c8f9-f778-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.206.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888422, "uuid": "cbd811fc-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.178.38.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7039b6d-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.180.141.233", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943862, "uuid": "e0bf78bc-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.100.146", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897903, "uuid": "df0304dc-f731-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.240.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948423, "uuid": "7ed21a65-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.41.78.57", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944522, "uuid": "6a0a84ee-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.86.161.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925503, "uuid": "217caa0d-f772-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.113.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740899403, "uuid": "5cf8f305-f735-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.96.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740883082, "uuid": "5cbbc3f9-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.249.248.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d70385ae-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.87.155.56", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d70356d3-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.169.244.129", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "9603d672-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.122.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897303, "uuid": "79513cc7-f730-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.252.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898323, "uuid": "d9038f6b-f732-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.25.226.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947583, "uuid": "8a36ccf1-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.14.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935163, "uuid": "9f38e05a-f788-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.30.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740958023, "uuid": "d8e463b4-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.209.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891961, "uuid": "09528294-f724-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.227.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925203, "uuid": "6ec9816e-f771-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.44.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740956343, "uuid": "efb0c105-f7b9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.32.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949863, "uuid": "d910bd6b-f7aa-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.97.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897063, "uuid": "e9fe0345-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.27.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740899283, "uuid": "151f3499-f735-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.222.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955262, "uuid": "6b7bc450-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.223.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895803, "uuid": "fb1ac4a0-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.223.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740941343, "uuid": "0306acc5-f797-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.246.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740901082, "uuid": "458274e0-f739-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.239.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878943, "uuid": "b9a11e75-f705-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.120.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e19aa1-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.162.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740906004, "uuid": "bb12f8fd-f744-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.15.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943743, "uuid": "99aebd63-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.119.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887703, "uuid": "1f444c8f-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.11.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915482, "uuid": "cce44cc5-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.162.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740874142, "uuid": "8c51216c-f6fa-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.105.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "9604442c-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.55.181.84", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740912003, "uuid": "b3274fcc-f752-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.38.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908342, "uuid": "2d0a2cef-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.194.29.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953343, "uuid": "f3565dd8-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.123.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914162, "uuid": "ba04cf7e-f757-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.137.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933603, "uuid": "fd70088c-f784-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.161.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740883202, "uuid": "a48967c3-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.161.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950162, "uuid": "8bdd92db-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.165.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740902942, "uuid": "9a637987-f73d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.170.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919982, "uuid": "47155aac-f765-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.175.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896763, "uuid": "3765bf15-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.176.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935523, "uuid": "75f36237-f789-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.128.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740941463, "uuid": "4aa0f6aa-f797-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.201.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908762, "uuid": "276fffc7-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.226.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873902, "uuid": "fd519808-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.233.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880383, "uuid": "13e1613e-f709-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.84.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955023, "uuid": "dce9d686-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.150.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914043, "uuid": "72c08fa0-f757-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.165.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888303, "uuid": "84de09d0-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.165.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919322, "uuid": "bdb317ac-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.166.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740883562, "uuid": "7ab87688-f710-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.203.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1df0fe-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.161.199", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894723, "uuid": "7711aa5d-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.83.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878582, "uuid": "e2d48444-f704-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.66.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880622, "uuid": "a2952fa2-f709-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.70.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878703, "uuid": "2ab3a5d9-f705-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.75.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915603, "uuid": "14a8e67e-f75b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.79.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931083, "uuid": "1f9f14f3-f77f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.78.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916743, "uuid": "bc101951-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.100.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944943, "uuid": "64d14208-f79f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.101.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908762, "uuid": "276fff2b-f74b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.165.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943623, "uuid": "51ed6050-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.169.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953703, "uuid": "ca393194-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.96.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740883742, "uuid": "e66cfd50-f710-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.14.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918004, "uuid": "abbbdb9f-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890283, "uuid": "20b2dec0-f720-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.20.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "96040558-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.21.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889863, "uuid": "26b27781-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.21.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee6a12f-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.23.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957362, "uuid": "4f31d944-f7bc-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.24.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878162, "uuid": "e80181ce-f703-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.25.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740883562, "uuid": "7ab82f03-f710-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.80.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951482, "uuid": "9e8dfd51-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925203, "uuid": "6ec97d77-f771-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904022, "uuid": "1e138ffb-f740-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890762, "uuid": "3e46061d-f721-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740899761, "uuid": "3257eb79-f736-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895623, "uuid": "8f9d66f6-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952023, "uuid": "e087540c-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893882, "uuid": "823efd73-f728-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740883142, "uuid": "809f69c7-f70f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.210.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914583, "uuid": "b49b113e-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.47.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948003, "uuid": "8476d418-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.248.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740912843, "uuid": "a7b01f49-f754-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.61.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740879303, "uuid": "905a8e6c-f706-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.84.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944704, "uuid": "d619d770-f79e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923582, "uuid": "a8f5f8dd-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908342, "uuid": "2d0a38f0-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925503, "uuid": "217cbd8a-f772-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.50.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911583, "uuid": "b87ee0ed-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.51.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911583, "uuid": "b87ebde4-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.54.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e1c56a-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.54.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917163, "uuid": "b6ace063-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.60.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951843, "uuid": "754710ea-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.60.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740915542, "uuid": "f0927242-f75a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.62.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937262, "uuid": "825a3c96-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.62.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1ccb93-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.62.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917343, "uuid": "21c8b6c8-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.63.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "9603a519-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.185.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885723, "uuid": "830e7aa4-f715-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.187.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900003, "uuid": "c2812b3d-f736-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.190.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923522, "uuid": "850df10a-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.191.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954003, "uuid": "7d273e21-f7b4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.50.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898204, "uuid": "91e8428e-f732-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.56.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951361, "uuid": "5661f834-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.58.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937442, "uuid": "ee0c74c7-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.66.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884343, "uuid": "4c4b2cfc-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.131.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "96034a13-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.127.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee67550-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.163.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee79c46-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.170.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740958442, "uuid": "d2e8add4-f7be-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.171.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887943, "uuid": "ae1e41ad-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.174.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880922, "uuid": "558f20a8-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.250.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920222, "uuid": "d606716e-f765-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.255.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1d0889-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.54.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873843, "uuid": "d9ba8449-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.54.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910743, "uuid": "c3e06c7f-f74f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.232.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886263, "uuid": "c4b215f9-f716-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884583, "uuid": "db2f0a79-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740924303, "uuid": "569c16a0-f76f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.103.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740876302, "uuid": "93dfc918-f6ff-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.106.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945842, "uuid": "7caf40ea-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.110.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917343, "uuid": "21c8cb7c-f75f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.43.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740897122, "uuid": "0d8f6eaf-f730-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.54.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740902643, "uuid": "e7f35c1f-f73c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.192.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925203, "uuid": "6ec9d731-f771-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.52.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740882843, "uuid": "ce2d4cca-f70e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.56.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947763, "uuid": "f5867d40-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.61.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740958562, "uuid": "1a1ca87e-f7bf-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.87.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889143, "uuid": "7967ac35-f71d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.95.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895803, "uuid": "fb1aa738-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.195.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c3eac2-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.198.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243ac4ad-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.206.163", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243ae7a0-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.226.148", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740907142, "uuid": "61cb4920-f747-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.248.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e2fc11-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.254.94", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740899823, "uuid": "573298ed-f736-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.226.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740909422, "uuid": "b0c49224-f74c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.69.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee794b7-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.77.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937742, "uuid": "a0f89225-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.13.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914223, "uuid": "de491dac-f757-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.15.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878342, "uuid": "53cdf769-f704-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.2.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e1e9df-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.2.56", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740905283, "uuid": "0d742b7b-f743-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.8.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878883, "uuid": "95b3c6a8-f705-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.218.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917822, "uuid": "3f7cecb7-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.176.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c41d4e-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.189.136", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740905283, "uuid": "0d74279e-f743-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916983, "uuid": "4b3b5633-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.168.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873662, "uuid": "6e09368f-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.189.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d70376ce-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.78.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d702b4a1-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.63.78.243", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740918123, "uuid": "f2b8d178-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.80.189.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955323, "uuid": "8fd123f4-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.183.36.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740882061, "uuid": "fc4ac0b1-f70c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.185.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740936303, "uuid": "46f5afd2-f78b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.19.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943623, "uuid": "51ed6a99-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.242.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "96035822-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.4.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740959282, "uuid": "c7cdd19c-f7c0-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.6.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896522, "uuid": "a7dfad3f-f72e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.64.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891183, "uuid": "3920cb94-f722-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.83.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740942542, "uuid": "cdf19d37-f799-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.142.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937383, "uuid": "ca980499-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.79.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952023, "uuid": "e0874def-f7af-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.21.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740940383, "uuid": "c6bee74f-f794-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.229.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740892922, "uuid": "45fd3dad-f726-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.236.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "96037d96-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.41.211", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740878342, "uuid": "53ce3b23-f704-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.180.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928803, "uuid": "d075b104-f779-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.50.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891961, "uuid": "09526de9-f724-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.100.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee75188-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.79.72", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948662, "uuid": "0daff7e5-f7a8-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.184.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927962, "uuid": "db34617e-f777-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.73.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740881342, "uuid": "4fba24eb-f70b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.105.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7028594-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.129.104", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935462, "uuid": "5194855e-f789-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.170.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893103, "uuid": "b1d053a7-f726-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.171.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740942422, "uuid": "866cfa47-f799-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.245.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888242, "uuid": "6078a250-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.122.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740879542, "uuid": "1f09b95c-f707-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.212.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911522, "uuid": "948f71d0-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.219.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919142, "uuid": "526ee6ce-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.41.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914403, "uuid": "4986728e-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.76.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740913503, "uuid": "3144ae21-f756-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.230.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885723, "uuid": "830e716c-f715-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.77.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898683, "uuid": "af7b4f25-f733-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.180.131.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a3275-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.227.69.237", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a2374-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.244.157.246", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943682, "uuid": "753bbb3f-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.93.118.165", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951004, "uuid": "81454f81-f7ad-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.49.248.241", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900542, "uuid": "03ba5c0a-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.207.55.235", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888603, "uuid": "37ce633a-f71c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.20.103.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943682, "uuid": "753bed5a-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.65.219.206", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c3a8d2-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.178.38.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943682, "uuid": "753c09e6-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.5.32.73", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740906242, "uuid": "493cd8b2-f745-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.38.0.69", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947403, "uuid": "1f3a1e6b-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.6.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893763, "uuid": "3af5568c-f728-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.146.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890283, "uuid": "20b2f16d-f720-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.153.128.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740929162, "uuid": "a65fc9d1-f77a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.127.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904022, "uuid": "1e13e252-f740-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.73.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740877323, "uuid": "f4132ad8-f701-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.113.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740956643, "uuid": "a279ab3d-f7ba-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.170.28", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "9604514c-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.56.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911583, "uuid": "b87eee7b-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.239.81.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943143, "uuid": "33c598e9-f79b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.144.239", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a4116-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.160.25.88", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243b112c-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.194.85", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943022, "uuid": "ec1623aa-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.94.215.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740877983, "uuid": "7d8b99a2-f703-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.116.214.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a2d26-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.200.14.126", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904562, "uuid": "5fa08add-f741-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.139.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921903, "uuid": "bfff33ce-f769-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.43.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921663, "uuid": "30989c38-f769-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.170.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953042, "uuid": "404c0caf-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.12.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933603, "uuid": "fd6fed57-f784-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.108.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955504, "uuid": "fb80bd41-f7b7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.100.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931861, "uuid": "ef7c5636-f780-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.105.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944943, "uuid": "64d16219-f79f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.11.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740959223, "uuid": "a4658c34-f7c0-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.170.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888904, "uuid": "eacd6b18-f71c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.235.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948062, "uuid": "a7f7a8ef-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.190.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740874983, "uuid": "81498ae6-f6fc-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.162.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888183, "uuid": "3cf52fee-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.27.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740920703, "uuid": "f486d0e2-f766-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.186.1.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e19675-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.1.153", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947763, "uuid": "f5866cc5-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.203.240.78", "Tag": [ { "name": "pw-poiuytrewq1234", "colour": "#ce2315", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d703961e-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.213.169.70", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d702beed-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.52.36.129", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee6a60b-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.159.114", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e1d2aa-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.21.160.221", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900542, "uuid": "03ba7f78-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.64.83.210", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954663, "uuid": "0695800e-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.83.179", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911583, "uuid": "b87eaff5-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.87.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954243, "uuid": "0c0eae2c-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.12.127.231", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949204, "uuid": "5047f292-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.98.48.4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243b104b-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.143.17.131", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243ad220-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.142.230.181", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7037c7b-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.48.186.195", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910203, "uuid": "824fdbcb-f74e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.183.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890222, "uuid": "fca3b327-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.62.138.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890703, "uuid": "1b4a100b-f721-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.225.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889743, "uuid": "dedbcc10-f71e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.254.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885242, "uuid": "645103ee-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.30.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933062, "uuid": "bb3e0dda-f783-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.12.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895083, "uuid": "4dc57217-f72b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.21.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945363, "uuid": "5ee45509-f7a0-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.249.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740927422, "uuid": "9987b82a-f776-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.51.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740958322, "uuid": "8b626814-f7be-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.55.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee75407-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.152.254.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c42648-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.13.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926823, "uuid": "34520f95-f775-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.183.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740899103, "uuid": "aa0f8315-f734-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.166.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740921723, "uuid": "5455612a-f769-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.242.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880742, "uuid": "ea33b8ec-f709-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.139.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884463, "uuid": "93a9c03e-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.191.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943682, "uuid": "753bfaac-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.101.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894783, "uuid": "9af865f9-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.236.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884583, "uuid": "db2ef7b5-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.186.249", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947643, "uuid": "adfe53d6-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.170.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894182, "uuid": "351c34ae-f729-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.211.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740935823, "uuid": "28cfba82-f78a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.5.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948843, "uuid": "791e8c9f-f7a8-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.12.155.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740903783, "uuid": "8f46110e-f73f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.12.203.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740952982, "uuid": "1c7f42ba-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.35.206", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740932104, "uuid": "7fe1a8de-f781-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.59.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7031263-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.94.155", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e30304-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.25.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943022, "uuid": "ec162690-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.221.82.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916142, "uuid": "5636faf3-f75c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.146.184.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740929222, "uuid": "ca8d7b59-f77a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.121.0.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888962, "uuid": "0dcbb7a1-f71d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.140.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1d6af0-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.141.176", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740951303, "uuid": "33b814d7-f7ae-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.144.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954482, "uuid": "9a931a0c-f7b5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.82.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937742, "uuid": "a0f84ed7-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.83.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923762, "uuid": "141dee20-f76e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.112.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "2439e00a-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.74.58.206", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740931622, "uuid": "611ad05f-f780-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.31.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885242, "uuid": "6450f446-f714-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.8.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884583, "uuid": "db2f1692-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.85.242.60", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896763, "uuid": "3765c6b6-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.161.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740913142, "uuid": "59ff5211-f755-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.171.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e24b06-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.187.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee770c0-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.142.215.155", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953343, "uuid": "f3566134-f7b2-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.131.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740895383, "uuid": "00c405d0-f72c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.144.248", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740912183, "uuid": "1e50a53e-f753-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.165.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957483, "uuid": "9715d439-f7bc-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.40.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957183, "uuid": "e43c7c62-f7bb-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.210.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914583, "uuid": "b49b26d0-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.83.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740901682, "uuid": "ab3782b1-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.53.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740906903, "uuid": "d30a82e4-f746-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.128.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740891303, "uuid": "8111855f-f722-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.231.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740913683, "uuid": "9c3e1d1b-f756-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.24.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "96045688-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.177.144", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740906242, "uuid": "493cf1d1-f745-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.178.250.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740959223, "uuid": "a4657f77-f7c0-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.186.39.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917943, "uuid": "879ed357-f760-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.59.120.8", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908643, "uuid": "e01a5489-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.71.68.52", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740932104, "uuid": "7fe1b570-f781-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.27.237.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7035459-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.148.192.44", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7038087-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.148.192.45", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7029882-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.148.192.46", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740875043, "uuid": "a4f8db67-f6fc-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.123.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740900782, "uuid": "92ee5f09-f738-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.17.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740914703, "uuid": "fc9daa17-f758-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.145.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933542, "uuid": "d97a5504-f784-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.72.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e2efb8-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.134.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740901562, "uuid": "63fc635b-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.211.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e203f3-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.219.238", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889143, "uuid": "7967ba7b-f71d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.220.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740873783, "uuid": "b5e1aaec-f6f9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.221.34", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740885962, "uuid": "1124b730-f716-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.113.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945661, "uuid": "10d55428-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.136.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911823, "uuid": "4775c3f6-f752-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.99.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911583, "uuid": "b87eeb29-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.242.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "960319cd-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740944162, "uuid": "93484ff1-f79d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.77.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740901742, "uuid": "cf0db67c-f73a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.134.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740899283, "uuid": "151f226f-f735-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.142.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887703, "uuid": "1f443870-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.238.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887582, "uuid": "d7333c0b-f719-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.25.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1d7a73-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.36.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946743, "uuid": "9588bf2e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.42.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957723, "uuid": "262c0027-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.5.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893463, "uuid": "88415d91-f727-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.7.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740893583, "uuid": "cfb6f55a-f727-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.8.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945302, "uuid": "3b138632-f7a0-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.186.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898683, "uuid": "af7b3e75-f733-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.190.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896763, "uuid": "3765b606-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.111.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880804, "uuid": "0ec715b1-f70a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.113.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740889982, "uuid": "6da290f9-f71f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.116.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740929762, "uuid": "0c66ef4f-f77c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.123.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884942, "uuid": "b18876fc-f713-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.64.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911583, "uuid": "b87ef132-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.78.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949443, "uuid": "dee797e0-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.125.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740905403, "uuid": "54dd7294-f743-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.94.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740901861, "uuid": "16358f96-f73b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.124.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919262, "uuid": "99d7f750-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740957843, "uuid": "6d924439-f7bd-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740929883, "uuid": "545bd379-f77c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740894603, "uuid": "3010ebb1-f72a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740896763, "uuid": "3765ce74-f72f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740901262, "uuid": "b0e87cc2-f739-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740958142, "uuid": "201ac1a8-f7be-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740879062, "uuid": "00dfc594-f706-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.176.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740890283, "uuid": "20b2ef82-f720-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.177.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884161, "uuid": "dff091c2-f711-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.178.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740892262, "uuid": "bc8aea61-f724-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.248.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740907142, "uuid": "61cb56a0-f747-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740925203, "uuid": "6ec9d08c-f771-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.192.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919562, "uuid": "4cb44c07-f764-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.205.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740884583, "uuid": "db2efc2c-f712-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.233.187", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949983, "uuid": "20c9be7e-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740887403, "uuid": "6c3e4925-f719-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.102.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740886623, "uuid": "9b841c45-f717-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.233.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740917043, "uuid": "6f1d56fd-f75e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.152.143.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740906062, "uuid": "dddaff7d-f744-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.178.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888003, "uuid": "d2154ca2-f71a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.135.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911223, "uuid": "e1fdb9e2-f750-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.139.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740932223, "uuid": "c6d065d8-f781-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.19.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937262, "uuid": "8259b0a5-f78d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.23.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898262, "uuid": "b4d6609b-f732-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.26.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740945903, "uuid": "a0d47097-f7a1-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.33.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740949204, "uuid": "5047f607-f7a9-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.119.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740940983, "uuid": "2c482b4d-f796-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.80.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904022, "uuid": "1e138164-f740-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.63.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740926461, "uuid": "5cec73a0-f774-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.88.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943682, "uuid": "753bb8f0-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.146.62.232", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740933603, "uuid": "fd6fa7d8-f784-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.147.13.230", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a7154-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.142.122", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740888303, "uuid": "84de0de3-f71b-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.251.136.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946803, "uuid": "b95355b3-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.185.80.111", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953703, "uuid": "ca390f79-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.23.103.228", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954663, "uuid": "0694fa11-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.23.107.112", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "2439d63b-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.130.31", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243b037d-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.159.16", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947282, "uuid": "d7038888-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.16.221.246", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a9b51-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.40.118.98", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950222, "uuid": "af9b24ef-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.172.154", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938583, "uuid": "96043d7e-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.50.182.23", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946982, "uuid": "243a0008-f7a4-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.127.246.238", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1740910503, "uuid": "34c6bfdf-f74f-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.7.162.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954723, "uuid": "29de9d6c-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "abington-atppa.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "5593cf63-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin.gestroom.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f99b72e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.evaluanom035.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "53f9f953-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.houseforma.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f84adc3-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "aromadecore.in" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740943744, "uuid": "99dd03a6-f79c-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "banappeals.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f769e5f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "barefootpilateslb.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946623, "uuid": "4e42a976-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "blessdayservices.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f9e91b5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "bmdcompany.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740938343, "uuid": "06b1ff00-f790-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "botnet.0x503.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923583, "uuid": "a959a51b-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "buckfresh.oss-ap-southeast-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946637, "uuid": "567e0559-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "cambodiatouristservice.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946627, "uuid": "5095e333-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "capchtaverification2024.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946628, "uuid": "5166da3c-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "carrierlinker.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946627, "uuid": "50bc434d-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "central2.grupocasaus.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740940262, "uuid": "7e93ad22-f794-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.gykem.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740937805, "uuid": "c6240112-f78e-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.jaxim.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740916683, "uuid": "989cc231-f75d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.neweb.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740904683, "uuid": "a7c2f035-f741-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.ninif.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740919085, "uuid": "3024f212-f763-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.somiv.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740898862, "uuid": "1a78ac4f-f734-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.suqev.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740955623, "uuid": "424dfabf-f7b8-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.tubyf.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740907742, "uuid": "c778f5c9-f748-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.tyheb.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740928623, "uuid": "657c3f37-f779-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.wezop.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947943, "uuid": "60af86f4-f7a6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.wygoq.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740911465, "uuid": "72483df4-f751-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "check.zagyw.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923462, "uuid": "611e4503-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "cobolrationumelawrtewarms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f6a0a78-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpchtaverification2024.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "53483e86-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "crimson-sun-3ac5.foxiproxi.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f6fb224-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "deturistaenjapon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "53bc65b2-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev.gestroom.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946634, "uuid": "5476600f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "drmarlenemd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "53f528e0-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "elnas.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f78d7d6-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "facturacio.titoworld.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946631, "uuid": "531b3e09-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastfreight-loads.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f9dcd49-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastfreightloads.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "541296ae-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "finocci.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946637, "uuid": "5648452f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "first-security-verden.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946803, "uuid": "b95cef04-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "firsteviewer.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "55825762-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "gestroom.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "52576c58-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "horno-rafelet.es" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "55d07832-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "iconichomestudios.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946623, "uuid": "4e55916f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "immo-etoiles.fr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950223, "uuid": "afa5f1df-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "inzbdex.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946637, "uuid": "56cc717e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "jessespridecharters.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948362, "uuid": "5ae8b847-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "joahhilperic.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "55e26672-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "kevinzhangadmin.jintsume.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f6b1e78-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "laborpartyjo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "53532122-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "livemap-loads.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "5634ac14-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "livemap-trucks.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "55fbe89a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "lucprofessional.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946626, "uuid": "5019c025-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "lucprofessional.grupomoltz.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948243, "uuid": "138a746d-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "madebyintelbroker.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946624, "uuid": "4e890760-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.cambodiatouristservice.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946637, "uuid": "5671b245-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.finocci.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f741c1f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.laborpartyjo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946636, "uuid": "561837db-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.lucprofessional.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "52584c00-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.ningbocrm.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "53abf18a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mine.moroccoex.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f8fc042-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "misano.gestroom.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f6c7883-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "mulleder.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946623, "uuid": "4e438678-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "my.salviatech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946629, "uuid": "51ccf774-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "ningbocrm.jintsume.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923583, "uuid": "a8fb8277-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "objectstorage.ap-seoul-1.oraclecloud.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923583, "uuid": "a907f941-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "objectstorage.us-ashburn-1.oraclecloud.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740950343, "uuid": "f7542803-f7ab-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "onlineauth2-client4765445b-32c6-49b0-83e6-1d93765276.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f75dd2b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-yoda.blog" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740948362, "uuid": "5af356c2-f7a7-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "paulinatajda.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740947525, "uuid": "67e933f0-f7a5-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "prove-wrapping-mr-cached.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f7bdbd8-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "recaptcha.dpk-its-cl03.agoracalyce.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f7389b5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "riverview-pools.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740954663, "uuid": "069deac3-f7b6-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "rtsfinancal.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946626, "uuid": "4fc7b796-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "sales.mypetapp.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740953765, "uuid": "ef4bb4c1-f7b3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "shevchenkoevent.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f8299b5-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "sites-6bx.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "5589c827-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "test.peperoncinochepassione.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946631, "uuid": "52ef2407-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "thesignaturemag.salviatech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "55824add-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "titrans-cd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "541da2f4-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "toulon-united.fr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740923583, "uuid": "a908aea4-f76d-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "uploadhaven.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946634, "uuid": "54a5c511-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "user.mypetapp.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740942842, "uuid": "80bbed9a-f79a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaultcord.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946627, "uuid": "50a7717b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "verify.mod-defence-lk.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740908404, "uuid": "51e54e85-f74a-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "vx-events.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946626, "uuid": "4fcd98d8-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "website.mypetapp.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946631, "uuid": "530fc42a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "wingsaviationacademy-in.salviatech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "53a59fb3-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "wingsaviationacademy.in" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f89c396-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.alphaplumbingfw.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "5440b291-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.amun.jintsume.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "523a033a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.bratusferramentas.grupomoltz.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "557b54c3-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.cambodiatouristservice.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f76b4c2-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.carrierlinker.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946623, "uuid": "4e6d4d7a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.fastfreight-loads.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f9baf4e-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.fastfreightloads.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "533fced8-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.finocci.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946634, "uuid": "5484ef6f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.first-security-verden.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f6e6f40-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.freshtubs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946629, "uuid": "5190bf81-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.gemrazorback.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946637, "uuid": "56a1ed84-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.gestroom.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946630, "uuid": "5257f572-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.immo-etoiles.fr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946626, "uuid": "4fc8c9d6-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.kevinzhangadmin.jintsume.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946634, "uuid": "54763f3a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.laborpartyjo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946623, "uuid": "4e6e5628-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.livemap-loads.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946623, "uuid": "4e6a7210-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.livemap-trucks.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "53fd44f9-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.lucprofessional.grupomoltz.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946624, "uuid": "4e8daa5b-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.ningbocrm.jintsume.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4fa474b4-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.pointtohealth.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "5522975d-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.sales.mypetapp.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946626, "uuid": "4ffff320-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.sis.houseforma.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f906eb7-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.test.peperoncinochepassione.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f7a4a4c-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.thesignaturemag.salviatech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946632, "uuid": "53a94b6a-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.titrans-cd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946635, "uuid": "55156030-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.user.mypetapp.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946631, "uuid": "52c5c810-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.website.mypetapp.co.za" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946631, "uuid": "52ccb896-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.wingsaviationacademy-in.salviatech.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946625, "uuid": "4f76c883-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.zamilgroups.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740880743, "uuid": "eab2a4dd-f709-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "ykapi.luyou.360.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946633, "uuid": "5441608f-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "zamilgroups.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1740946637, "uuid": "56477479-f7a3-11ef-a1f3-82aee05be84a", "comment": "Malware payload delivery host", "value": "zettagc.com" } ] } }