{ "Event": { "published": true, "date": "2026-03-21", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-21", "timestamp": 1774138520, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "3a84e120-ffd2-4a81-81a3-5a75e3a4ae4d", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774051455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051455, "uuid": "5f757ab4-e831-462c-abd7-c66e78d471e5", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051455, "uuid": "2a0a52cc-6d22-4f1b-a0be-db0914919c36", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051455, "uuid": "249dac95-741d-4653-9d96-df81bf4f262b", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051455, "uuid": "3b430b5a-74df-47bb-89fd-9db4f10e20b2", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774051455, "uuid": "a579367f-58be-4c97-85cf-40b57d17a90c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1774052541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052541, "uuid": "65b12db4-0954-4792-93c7-12b31afdfecf", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052541, "uuid": "48e2bdc1-5129-4a5f-b22c-06aea2570b22", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774052541, "uuid": "f467c25c-e4f0-4aac-b478-bf4b1e7515d2", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774052541, "uuid": "009b6699-8b13-40ca-b47c-444a862010cb", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774052541, "uuid": "dd202272-134c-4e52-bdc3-2ba31c699951", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1774055227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055227, "uuid": "15638b92-6aa7-4a6e-bbb9-339146c6793d", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055227, "uuid": "f97a7c4d-9bcc-4255-9864-035985b93825", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055227, "uuid": "63fdd26e-c368-416c-b6ba-fa860ca36508", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055227, "uuid": "da974a17-0647-4346-995c-f12b39824ba0", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774055227, "uuid": "87cfa486-56a2-4a46-b6b7-0257c7600a2e", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eb57736-24cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774059104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059104, "uuid": "aa4f8a5a-3a41-4f8a-b443-87621305b95e", "comment": "Malware payload", "value": "7974d5ea4a6318be35104768eeb2ea82", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059104, "uuid": "434e9001-f864-4493-8d6d-99e100f48467", "comment": "Malware payload", "value": "062ec28eb06d67fe174239b88f2389507fd7118adb24bb7b93ec22f0df30b1f4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774059104, "uuid": "92b65443-1943-4702-ac6c-c81afe24a789", "value": "T1F17733FB04E9A8D8BED00A5B188894BBD7F18C277644CE3C519512EFED95D4F380B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774059104, "uuid": "4af35634-6c92-4799-9594-9b62f5a14aaf", "value": "786432:NmJR6OaE08uAZjwyrAgo/bg1ezyQAW7XvRYuVS+O9EiVg7:06K7PrHC0yyQZLRYuVkEiV4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774059104, "uuid": "5afd38c2-0a74-4972-a5b2-8ac9ce66155f", "value": 34445824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774059104, "uuid": "99c1259e-8519-4b62-a82c-d7e486d41f3d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a94ae8-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774060510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060510, "uuid": "c2d409ad-9baf-4769-aca2-e6d8ab751279", "comment": "Malware payload", "value": "24456588ab71d2c5af5ddaeb9816f01f", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060510, "uuid": "ada4bdf0-6c09-4013-86bb-8b822ec9d430", "comment": "Malware payload", "value": "c3bacca51fe3ed818e05d6f014310e3897027f03fd134e21a0c442831b97452c", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060510, "uuid": "e834cb21-ea2e-4967-8a48-724c8fe496c4", "value": "T12406E123AD9BE429ED7784F351C6D277742B15A4AC0B92BE03905EAA4B70C4B0351E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060510, "uuid": "45b536ae-a2bf-4f39-b911-fc5377175f39", "value": "49152:wqDAkxrbtpwHbFQ37Q5u7JEBPuJgCS6hij5A0exH0mATQRgrEogxph+IPvUCV3:wqvwa7Q5Aqu20kl1exU+RoTEhxU83", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774060510, "uuid": "e930d266-bcae-486e-b363-9579ba97ab97", "value": 3776678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060510, "uuid": "b0287a01-949c-4689-8a24-3bc9fe731b41", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e40b2b54-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774060643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060643, "uuid": "84a97572-7117-4524-a50c-2fc5ef4db56a", "comment": "Malware payload", "value": "5403274b6873e0b500d0b0af8263c61e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060643, "uuid": "d105d5b0-4162-4970-93c7-3b30a034e62e", "comment": "Malware payload", "value": "885be0043cef0c62bec7f232500548953b6be217d2acb0a23a4c28e1701ef533", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060643, "uuid": "102dc1f3-fb35-4c9f-8cf7-5abc10f3355c", "value": "T118931A31786F052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060643, "uuid": "9f640c42-d376-429c-a2a5-5a1fd9557b93", "value": "1536:9myp1tF/uwMmAIa14oXusIcepeV7tb73WjxCrCitkb5fv2v05x9krfiaEsCZKf6x:9fQI7GGitkbFv2v05x9krvEsCZg6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774060643, "uuid": "1e89ded5-ed6a-4c33-b5f4-f0c1c112b761", "value": 94527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060643, "uuid": "010518c4-3a60-4fe7-864c-6f64b3b1904e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774060925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060925, "uuid": "f01278a5-ccc9-48d5-8da8-cfe3aaee0577", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060925, "uuid": "c42dbe34-2882-4129-94ac-338bbd1077cc", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060925, "uuid": "b51cd029-8c80-485c-aefa-36939b096b23", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060925, "uuid": "759dfa41-8a71-4dec-b3c8-c4469b54fa84", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774060925, "uuid": "fbef0914-c019-4f4f-8350-8a86ae3134ef", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9a782ca-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774061109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061109, "uuid": "f14c41c1-312a-4799-8030-5e8561e019d6", "comment": "Malware payload", "value": "213d5fe21aef6f1c1c773b31fa813029", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061109, "uuid": "930c9ddc-310e-4e02-9d6a-6ccaca27e058", "comment": "Malware payload", "value": "b4c2778d2cde572267f03ca25a1a3362e17c0798a4fa58a0827336486ae56e89", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061109, "uuid": "2861493a-e418-43cc-8f05-d0b2ef9f1e7c", "value": "T1BBB523126EC8543EC532C230DAEAFB6D30EB6FB74FB252E567F4F6898D1225119221", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061109, "uuid": "c9015be3-3592-425f-ac6d-31a2d30883c6", "value": "815e1ba56e855b07daa7197697b159cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061109, "uuid": "7411651e-b364-41fd-8a63-e0519994f1dd", "value": "49152:laQuR/7TU8ip2tuxZLvffY8iU4pTWoWQKJJdcs9OYhRMW6:Ro/fi/7XYf7Jh4JnnhG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774061109, "uuid": "0c8cf913-15ab-4a6f-a21b-12aa82091a8f", "value": 2393088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061109, "uuid": "2d3ce8cf-e682-47c2-bb57-0a2ed17786e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aa61088-24d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774062077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774062077, "uuid": "776900ce-cc96-4eae-b07e-8336a09364ca", "comment": "Malware payload (Vidar)", "value": "1c2f04ab85e3e76e1d43a5039d8610db", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774062077, "uuid": "c749a952-57de-426f-b577-e3acdf89dbca", "comment": "Malware payload (Vidar)", "value": "d31f50a42ef9a7629522f1a49c4ce12210d4f193b38cb122867c1038f69dc267", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062077, "uuid": "a61f66fe-0262-417c-ba58-115e9a2f5005", "value": "T1FE95490BBC9418E6C46A97758CB712927B30BC090F3267D75E81BA782FB6BD06C757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062077, "uuid": "db05b57e-8182-4918-8648-5b0724834b29", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062077, "uuid": "5deb8249-0175-44aa-9500-44e0f41121df", "value": "24576:2T9eGXCtHpoVkdVgk8lpHyiiXosWIR3SUMKH0YZr1HXEXP56fB11rWtPdeMGBhj2:2T9eDHiVkdKkxiiXoOZH045HaarH2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774062077, "uuid": "6fae43dc-9e26-410e-98de-7ba1b5998a33", "value": 2059440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062077, "uuid": "0a84679d-fc85-49e4-b866-c16f78e889c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "342891eb-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774064643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064643, "uuid": "62c5a989-1376-411e-b3b1-7255149bd85b", "comment": "Malware payload", "value": "a58ba53cba562aff7d6ca9b2b03ffb9f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064643, "uuid": "d6e18f30-59e6-4c50-b181-c2ed85a0ecb2", "comment": "Malware payload", "value": "363c2dc9ee818a48256ae08c2cf58f18a7e2a01f92b7d62815519031bf063b32", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064643, "uuid": "91ad5e71-6f46-45ab-9c6f-0af7c947495b", "value": "T172A5F11CE1636E73CD67B3FE94A36346DF24A08511995E9364C259288B4F6243F322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064643, "uuid": "3a328da1-3ea2-4a89-8f5b-7c0882b17e74", "value": "49152:n2/l4nPNSkObObJDlgckgLe/SIg2RbcBbuSdu+:2gewlgb3vVK8Sdu+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774064643, "uuid": "5b34a5e6-780b-4a3e-adbd-6cf43165377f", "value": 2144944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064643, "uuid": "05d01d4a-7726-46c9-b8f7-c9fe190d53f3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774071727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071727, "uuid": "4182e71b-9a0f-4fa0-a07d-de42b79dfbd7", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071727, "uuid": "1d7d0fae-f8ef-4465-b21e-ad8d351e79e0", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774071727, "uuid": "90462c6d-9e60-4d70-a34a-f067785cc317", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774071727, "uuid": "f3a555be-71ab-4dcc-bace-f068f87a076d", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774071727, "uuid": "36586921-ca80-431c-a423-4bd4dacc3b9b", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866dbb2f-cefb-11f0-bee4-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774073059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073059, "uuid": "0221488e-3ea2-44eb-ae59-1eb30b5faf09", "comment": "Malware payload (Mirai)", "value": "e3ca702505aa8cc3944e0bbfabdceb40", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073059, "uuid": "d95a9070-b7b3-43a9-a563-2c1085d5d52b", "comment": "Malware payload (Mirai)", "value": "c78ca6ee275aec8ce7513d31c5332e1e7ad7742308d0ce3d70393aac4fc4ea26", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774073059, "uuid": "3acb3e07-af15-4633-8096-e752edb93326", "value": "T124D312ABCCBB89CEFE6A8FB52657094F0DF6E1D4E5843D98453B108027F8256A514F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774073059, "uuid": "758aafbd-fb92-49ae-9796-ea1482daa4e0", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6con:7O/QJHZweEL/NOjCHm7FZZnca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774073059, "uuid": "2552f827-f3e2-4fd2-8443-e307b005aae4", "value": 135660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774073059, "uuid": "c9c5f364-221f-493f-86fa-6dde6043c480", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1c67532-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774082114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082114, "uuid": "1a42bda5-072f-4552-bfac-719c0c55cbf8", "comment": "Malware payload", "value": "62a0e401fcc42c435e66fae9f71d6c10", "object_relation": "md5", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082114, "uuid": "3b2ccd2c-b7ae-4da1-bcfd-2360fc050a91", "comment": "Malware payload", "value": "5992b0575201555ed33defd0f9d989627c295f4f7bd2522f787b11f8a15b61d8", "object_relation": "sha256", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082114, "uuid": "12f23d37-b892-4306-be47-1d83920d9ad4", "value": "T13031F18E70F45E43A58CCF0C70F58DCA6316D991619A2A32ED4A1FF7A48AD54301AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082114, "uuid": "c5aa95af-676d-42a2-921d-7c63197b2bd0", "value": "48:YUcWsZZCSu1xVCFJty6EmMpAO0o7oDNC4oRkOF:mM1qBw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774082114, "uuid": "a0007d46-bb6c-498a-8931-9047183b1cde", "value": 1873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082114, "uuid": "7686364e-ea0b-4904-af89-0ef5134e2d5f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4bff68d-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774082119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082119, "uuid": "8e3170ee-1cc8-4ca7-9485-e9da593617f7", "comment": "Malware payload (Mirai)", "value": "15c8ba6dfb03c4abe97885ab23be5f34", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082119, "uuid": "f12ead88-4ab6-42eb-a1a7-5df7edf9ce22", "comment": "Malware payload (Mirai)", "value": "2990ecb627c39d0c0d987c7dd00f0bae177b0b5a2411f736439e86004d5d6e93", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082119, "uuid": "0a06641c-93a2-4cd8-8340-8bc268613c31", "value": "T1DA71A6C4C830A4375C868A0BF561C6AA6DDC93E599B4C16C53A99E3712E1F3D7C8B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082119, "uuid": "fc9e0b42-13b1-4879-92c2-248cfa83f6ee", "value": "48:Za1zqf2lveezXQScxkcJ+Yu/YwV41z/0EqFEQKtYZ/D5+O:Za1zqf2xJzCXsv4zicy5n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774082119, "uuid": "a051b6fb-a1d8-4f0f-bc27-3dccfe7236da", "value": 3496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082119, "uuid": "8a10c564-5a18-45d3-b2cb-b23e9f221059", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed9f7b4c-2502-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774082993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082993, "uuid": "51e488b9-d66e-4542-8195-ab27c74aabc9", "comment": "Malware payload (Mirai)", "value": "dbfe41a76cc6de9c51b50749daf951e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082993, "uuid": "dd058f04-cb1a-4416-b56e-dd1647beb3b8", "comment": "Malware payload (Mirai)", "value": "e87f036b421f3d4cad02a6bda6de7786166d7e87ea64096e100eeea658d5aeff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082993, "uuid": "c9bf9609-f815-45b8-95a1-5c5798b5c94e", "value": "T190044CA3A703DEAFF5AB47710AE78D3466E129F226B68152E235BF411B311C01D19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082993, "uuid": "cb2df011-d6ef-4d87-835d-d8cd3368387a", "value": "1536:mNA7dksRK75rmVqmonkXNcqq3L6EgYKAphMAR/D1optLzi2UkJuBWuA38EiagPTM:K75rmCkX4wSuW2UjVs4ryehMRZgDpBrs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774082993, "uuid": "f955b5f2-b51c-41cd-8850-780600965e1e", "value": 177895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082993, "uuid": "0f3868fe-06c2-4ee1-887e-f9c159fa288b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40783d0e-2503-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774083132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083132, "uuid": "28501d3d-7d61-4354-adf3-369685cdc569", "comment": "Malware payload", "value": "e2d475bb62a2371848108c4defcedb52", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083132, "uuid": "edc94ac4-c486-440e-94f5-2771e079e082", "comment": "Malware payload", "value": "f9c15fadbd32fd4bc4162871e21c72460060196f975cc98c539654c76cdac47f", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083132, "uuid": "028364a2-2f50-48db-8af3-c5a270cd8817", "value": "T11786331B35C0E976C4B7017218E1CE29CA3472A7173F9EEB778E731B691639062A50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083132, "uuid": "ec34fe3f-d12e-4ba6-b18a-d998d4684d44", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083132, "uuid": "72dce1dc-68d6-49a7-b940-62bdf603a01e", "value": "196608:Vs5Cv3mgYl6vjHeD/DGI9bFoBJUW3LiL5pnrPn24dNa:+23eejHeUUW7apnC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774083132, "uuid": "388a9165-945f-49b3-9018-7722e2967c32", "value": 8610304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083132, "uuid": "3ad335c2-be72-4d7a-ae4a-d3ba19988008", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a9fd62f-2508-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1774085430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085430, "uuid": "9e98ce8c-7c4f-4007-8b51-371209e7aa11", "comment": "Malware payload (ConnectWise)", "value": "3867a64160d8b1856936e58abd107d9c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085430, "uuid": "f98b39be-4a01-4181-8095-8435547ac914", "comment": "Malware payload (ConnectWise)", "value": "925733259ba26b4dedc3c088d3b947f456ef9294d8cb3b37764d6d65e4e95f1f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774085430, "uuid": "9636d110-1e6e-4639-8bf1-2c99ce4146fe", "value": "T1DDD623226AFE8599F8F35F34FD7A99A5853ABC248D62C01F1325780E1972B4186733", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774085430, "uuid": "85bc4507-97b1-4ff5-a7b6-c53e24a79ac3", "value": "393216:QcVPOBdrcVPO4cVPOCcVPO9cVPOmcVPOMcVPO5:QcVmBdrcVm4cVmCcVm9cVmmcVmMcVm5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774085430, "uuid": "428e9a05-1c52-45d4-8c00-f9e323e116dc", "value": 13676544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774085430, "uuid": "0861196c-99a1-4fdb-9438-3613f79efbbe", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fda9f21-250d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774087372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087372, "uuid": "702dee79-a55e-4e81-9544-37f254cbff5a", "comment": "Malware payload", "value": "00b741e018cf66efaae0faee7fbaca96", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087372, "uuid": "a6bdc48b-afa6-4c4c-a817-569f9913dbdb", "comment": "Malware payload", "value": "9160a0cac4195f35a59853aed05c326c03452ce1ba38a3f9fee19c3520eb03c6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087372, "uuid": "1bb3a737-00ae-47b6-8ca5-9a72f495fe70", "value": "T1DD7394B13D8B2C2A110F029FA057321CA4D6CEE0E513A5E8F1FF912867F5DD176976", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087372, "uuid": "10b66d9a-9ceb-44df-871e-5e0cc4a7fb87", "value": "1536:IdNKuu59f5spVEc9lGzvEQYM1tAZa/dP+3mT6j:m09f5sptkzvEQYM1tAZa/dPCU6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774087372, "uuid": "a2487988-a6aa-453c-a1ed-f7ae9bf263f7", "value": 77370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087372, "uuid": "69df9bee-87c4-4ffb-b3c6-368b7c570176", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774088226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088226, "uuid": "be591967-ecda-4052-9196-1d61cd221a4b", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088226, "uuid": "cc73e586-0c3d-415f-9318-4a727ddb8fee", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088226, "uuid": "5b074eb5-e63a-4c39-9297-5209b6363ae1", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088226, "uuid": "52e077f8-bce8-4a29-9219-eb5a75db80e4", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774088226, "uuid": "600b7fb7-c67d-4bc1-91c4-4c1b125a57bd", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1353b96c-2511-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Loda)", "timestamp": 1774089069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089069, "uuid": "109f9602-4be2-4f1e-9fb6-ec31be427a6a", "comment": "Malware payload (Loda)", "value": "a77c1b82287387ade7d2cc0ea158cb6c", "object_relation": "md5", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089069, "uuid": "a11ead11-d38f-4adc-9782-2ac598647cd3", "comment": "Malware payload (Loda)", "value": "2cdd303fc725ddb12a305e469223f9aefa49809a9919de479b6c43aa74a5af92", "object_relation": "sha256", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089069, "uuid": "bfa65a2c-bb6b-4011-85af-960e9662c573", "value": "T123A633DE2DDA41DBD9C214B0D7177AFB23F305F558C98C326EC2344AA062EB5306A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089069, "uuid": "3fa24368-84ff-4353-949c-dc6e194da6d3", "value": "fe7c86cdf6037908967e99decf4a7242", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089069, "uuid": "9351bae3-1bfe-45d5-be1d-9d150e9d7154", "value": "196608:z6AzuNtxzoxklasTwYOYpX0F3W1g7NsTeabDl6xc7JFjjhr3mspjoA3aAmUIdFD:18zlaqw7YpXICkygxc7JFHh3mspczRUs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774089069, "uuid": "ea30ffa7-969e-4a93-8996-13ca4697f989", "value": 10199040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089069, "uuid": "49af4bb3-8bfc-4932-8209-d99ef5d74476", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96e09587-1678-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774089728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089728, "uuid": "84f0d8ac-96f2-449e-b510-96cd686b3677", "comment": "Malware payload (Mirai)", "value": "c64c9d911728da2405adc5ecede835bb", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089728, "uuid": "00aa0ece-4ab9-4422-ab38-f773b3146bba", "comment": "Malware payload (Mirai)", "value": "534f244b8074541cbbbf619e75659e81b5334224deef75f8ac1a1b9501203b62", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089728, "uuid": "ffd66b53-a7bf-46a3-a3ab-28bf6b93602d", "value": "T16264F1CAFF11BD3AE984067529AB074DB3B59F99D3C3F150F290C61E39A9285AF610", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089728, "uuid": "151599b3-23f0-48bf-b677-085ad8a5be33", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio1wPa5POdOQ33Q:p3lOYoaja8xzx/0wsxzSiifPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774089728, "uuid": "7657b67a-57aa-4cd0-83ba-3a6865fa144d", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089728, "uuid": "0014afc2-1fd3-4c46-b0c7-e87d9105acdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0da1d5-2513-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774089968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089968, "uuid": "28f5dbc1-0378-4b67-b78c-eee1380d6f70", "comment": "Malware payload", "value": "5c8374aa8e3f5e24c1e5a2c01f4a77d4", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089968, "uuid": "a5ebf59a-4ad5-4515-8dac-1da12e0c8319", "comment": "Malware payload", "value": "2cc63c6550cb4f810873cbf6e021167b0bacee4fd95264d8377f704cf6b271fe", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089968, "uuid": "94a5f66c-c33c-40f0-95bf-395b8e97f917", "value": "T1F755CF5550E8FB95F33D33BEC29228AD71B86915EF18F3EAB1089939A31B444DC5A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089968, "uuid": "e54b79af-aca0-4da2-b0c4-0e4eae72e520", "value": "24576:A8d0JpolJtoZBIvGNlvgj3LVr/1YOWAu0A5Bwd7D7KplCbvJjo2FURm/8:ADpolJGZBfs3JrfWAu0A4d7XKbCbVn2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774089968, "uuid": "d0fa25fa-6367-460b-8677-2a28602a18ce", "value": 1374720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089968, "uuid": "e29d44f7-fa83-4c41-b3b8-5a6e7a9ff993", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "284178d5-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095546, "uuid": "8bd52230-85da-4d7e-8896-b23ef8c70d8f", "comment": "Malware payload", "value": "dcbc3f26c964d6928d230beaf7b5bc07", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095546, "uuid": "1761cee7-c79a-4d4b-8a27-bade2ad561f6", "comment": "Malware payload", "value": "0892f92cd9258b4986954da9be8314c8b31a82fe2984daf8b51f4d30b5fe7ec3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095546, "uuid": "9a94c793-f57a-479c-9a02-13041920b19d", "value": "T112B423F5A7606BCC9D20122F2F4A2BCE19274B51B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095546, "uuid": "d6ee8c32-ac36-40ae-9d85-9471582af2c0", "value": "12288:FBRdpQ73iBVYWgCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUy:FHUw2WR9XgbM0azTHiQIouD2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095546, "uuid": "89d3a333-04da-4d97-b8e4-755be6e825d8", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095546, "uuid": "669130c4-fdb9-4b70-88b4-bda16d978a5c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28539e5c-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "fcce29f1-525e-4fd0-acfc-8ba804633d22", "comment": "Malware payload", "value": "b30fe9a1d62121399bc93c43fcab0670", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "8ec1c0c9-f261-47a5-926e-07c4e7623caf", "comment": "Malware payload", "value": "b003270a36f3df0eda848fdce570104aab4ee2325e65c9f2624a0f12d6f4ab75", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "3f9dfead-90a3-42e3-b641-cd95cedd1f77", "value": "T1A2B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F7FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "85cf3ef2-7516-4208-8767-8d557862e606", "value": "12288:IBRdpQ73iBVYWRCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUi:IHUw2W89XgbM0azTHiQIouDe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095547, "uuid": "68a50956-b7bc-4def-a503-583e11361dfe", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "6c839316-b835-492e-8d8c-2b1be82eb802", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "285599ae-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "fa43b632-58e7-4024-8b54-f0a5335d6aca", "comment": "Malware payload", "value": "af707d99e453159e30825efc016664ab", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "fd5696d4-f45d-4e7d-b4a1-0a587bb4cfa7", "comment": "Malware payload", "value": "f70a64ed0361c52427a3bc533aff6f8e473136458c398e059553068c579632ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "9a3c88ec-4a8b-4b5e-a3c2-f22574ce3c74", "value": "T19FB423A3FFB9786920C2B952C1615E4B641C79A4C40D5F987E480F4644F972EE73A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "76aaf1f0-3083-4483-a7a1-814a7d3c908d", "value": "12288:WIUDzTyUi+7b8FnNy3iO6TroDiiyeEP+6pFgSq6o2+:1GzTyaHCNySHvfiyeEW6pCc+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095547, "uuid": "dfc57578-3460-472a-bdc9-3adf960b5527", "value": 527980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "2bc352f6-f647-4cf5-b4bb-c00ba710cd3b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28672709-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "b221c79d-db41-45c3-93a7-ca75c8059b42", "comment": "Malware payload", "value": "c81cf78ceebafd6a05ad1bc2be8ba7cf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "67e2fb96-97c3-46a2-b9af-385e663f8af0", "comment": "Malware payload", "value": "e03f893679c1edc5048a4fe7197efa8d0deb637e1c3c80029b0fc10ed8c960f8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "1c58f062-b4a2-48ab-9771-2af1eddb79ef", "value": "T17CB423A3FFB9785920C2BA52C1615E4B641C79A4C40D9F987E480F4644F972EE73A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "8938028b-f31d-461c-a3c6-a29801e2e120", "value": "12288:mIUDzTyUi+fb8FnNy3iO6TroDiiueEP+6pFgSq6o22:lGzTyazCNySHvfiueEW6pCc2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095547, "uuid": "eadaa30c-feea-4ff1-8399-bd46fbd5f409", "value": 527980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "c705e49c-a825-4907-8905-1ce76c8c53f8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2871cdc2-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "88028e21-5ac0-43ab-bc11-6e6c4f097fb1", "comment": "Malware payload", "value": "496871cd2f5b555bb28c59f783e8d4db", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "de9f88c2-66c9-4a34-8f96-807babd07c67", "comment": "Malware payload", "value": "2beb32f3ecf026736f09ef26c30958efad74af6fc2e87d3b2af2d4fb0591e3d0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "36ea5d8a-a776-4447-876f-348839046485", "value": "T199B423A3EFF9786920C2BA52C1615E4B641C79A4C40D5F987E480F4644F972EE72A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "ca0d22ab-43ed-4c1a-a129-6a27c6162970", "value": "12288:WIUDzTyUi+Vb8FnNy3iO6TroDiiweEP+6pFgSq6o2O:1GzTyaBCNySHvfiweEW6pCcO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095547, "uuid": "1316e404-34dc-4dcc-8db5-600908068e2d", "value": 527980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095547, "uuid": "ab6342dd-7efe-4b0e-b250-12ea5d103d46", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbf37a61-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095848, "uuid": "85af927c-0935-4778-8b2b-d1b9dc7608e8", "comment": "Malware payload", "value": "240fc32daf12d98133690a4653cc0d9e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095848, "uuid": "614f5421-eb98-4281-9075-fd013e46806f", "comment": "Malware payload", "value": "0137cfcf6384fc0e6f78bbe70cfd8e04df7bcad6abdb06bb8b9d137bdfbe28ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095848, "uuid": "89082692-dce1-446f-8aa4-5a08099c4dd0", "value": "T164C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095848, "uuid": "f26c4cdd-d31f-4e81-a006-398396e053a6", "value": "12288:RMU+0xq75aS9iYIp6cP/G2Bku89tNvC28c5/VTUPkYy6:V+J71vI/G/Yc5/pa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095848, "uuid": "c8d24101-00b9-4d0f-a5d4-3150c5ae3560", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095848, "uuid": "16ebc3bd-c74f-4113-b8c4-9646d48296ca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc81ee51-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774095849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095849, "uuid": "59b16a5e-b70e-4a55-8f3c-9bda284ed02f", "comment": "Malware payload", "value": "a0ec4c6e86d9286ae9a98fc003578a4a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095849, "uuid": "7d80d036-c3a4-4ab7-9d84-1565fdc2569b", "comment": "Malware payload", "value": "1be9ee8cee1b07ef55736b23c25c3b5fd2c96f4e9c8aa15deb79eaed64b29ae4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095849, "uuid": "cabc4f16-4b2b-46d7-8f8d-f3269ed642cf", "value": "T172C4235D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095849, "uuid": "d44bae47-7b58-4660-ab2f-8685ba47a119", "value": "12288:lMU+0xq75aS9iYIp6cP/G2Bku8+tNvC28c5/VTUPkYyD:x+J71vI/GgYc5/pj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774095849, "uuid": "4d0542f5-340d-4338-a696-914383634443", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095849, "uuid": "90fee50c-b641-4654-a8f7-a1c92ddf6477", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0bb271a-252b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774100527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100527, "uuid": "cc9f1d0c-012d-4563-8ecd-e860dcbfdb68", "comment": "Malware payload (Vidar)", "value": "24e34ef8244605897e4cb750030d1e89", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100527, "uuid": "46b7bbd1-3981-449f-a1fe-8ded4f1d0ff9", "comment": "Malware payload (Vidar)", "value": "5ae30eecdfb95d98cf238ff69b392cb36d1d3fb09481d79fa92c69dad48a0df0", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774100527, "uuid": "659bd392-d177-4bdb-b6e7-21ea6bf2a90b", "value": "T1168412866BE81915CA3D4731B473E7BBA2B0BE630920DBED31D86DEF3B4578011522", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774100527, "uuid": "8d51d933-d8d6-4639-b7f6-432565867b93", "value": "12288:nHfdbye7MHyOQ6yvE+R9tXASbOVJcbm6pPl:HlyyEyvt9twXV+bm69l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774100527, "uuid": "5e21f56d-6a95-4e1e-9eff-aa906ef06c21", "value": 393952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774100527, "uuid": "a208fae6-0c1c-4381-8a44-9e8c19cda5c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7954ff17-252e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774101695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774101695, "uuid": "5aa7b676-cf84-4d6e-a657-59858d05cfed", "comment": "Malware payload", "value": "7c234ea4d4f00de7652f593108979dce", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774101695, "uuid": "e73d3eae-b2d3-4fad-ae7a-7ff2dd2e6c2d", "comment": "Malware payload", "value": "a39ed0425fb6d1114c7024075a4137ea5a9ee7aad2924924f91a575644af1469", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774101695, "uuid": "756d31ed-53ff-4961-8034-4d4a122887b0", "value": "T1DD931A31786F052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774101695, "uuid": "1c65e640-eb50-422d-8d28-e863641bcc81", "value": "1536:9myp1tF/uwMmAIa14oXusIcepeV7tb73WjxCrCitkb5fv2v05x9krfi8EsCZK/6x:9fQI7GGitkbFv2v05x9krtEsCZ46Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774101695, "uuid": "3233d677-bfd8-464a-a93f-50d89c11dfff", "value": 94527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774101695, "uuid": "6f910bb5-df33-4c39-ac9e-aca34f7517ea", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f1fbed6-2525-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774103748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103748, "uuid": "e402f70d-3b9c-4b79-a63a-5233cdedd09d", "comment": "Malware payload", "value": "c2e97ad957d5608e96bbfcf0f71c0479", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103748, "uuid": "d15e0843-4818-4a28-b930-aead4c553226", "comment": "Malware payload", "value": "2fcaf9a4f6d549a86f4fdf6a6b01e044c29fce093a777b114d73dea8adf25538", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103748, "uuid": "60109947-7001-4560-a29c-0c6f08c0a7a2", "value": "T134F533FB589B03F28204977EB27E30CD1A242E3919D848958D65CAC788FECFE5524B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103748, "uuid": "759dd33f-f7bf-4d01-b411-73ec038f746e", "value": "98304:/NWqv24wk1zDybo1m9hye4TFXbXzKRGlAa38Ph:VWq/PyboeozRbdKa385", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774103748, "uuid": "3761bcf5-f46e-43b0-ac9c-228084171412", "value": 3450672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103748, "uuid": "7f0baa19-6d26-4d61-8764-5af0d50ed895", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92fb2716-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774103886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103886, "uuid": "13cbdff6-46ab-4e81-908d-58c42a27751d", "comment": "Malware payload", "value": "a169a89eceadc21444746727e0d7dc6b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103886, "uuid": "d3752994-e8ca-4670-bffc-8160d521d5cc", "comment": "Malware payload", "value": "053ef6d0979af60908e898e8c067496019ddfb5bceed048a2569da16f35420a4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103886, "uuid": "0a456bcb-2ee8-4f7c-ac0b-e52194746f5b", "value": "T145B423F193429E0B23A4DAB457E3DB3375CE7292769D9301CA06CA9F487072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103886, "uuid": "4d30bb2c-60c7-4b88-aefc-f9761decf78f", "value": "12288:Skmht7DrvdyiaCCH1oHF9nJ/qjuy1goJrrzTPwk0:SkmHzMvH1ELnK1goJnnw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774103886, "uuid": "44bc89aa-996a-4cd5-a138-312ebe755e4c", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103886, "uuid": "70009059-7649-4a47-84de-f8c8339d8813", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9309f7d8-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774103886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103886, "uuid": "8972d41c-514e-4aa2-abfc-d46a76623dd0", "comment": "Malware payload", "value": "e929fe4af39692f7552023dc4650cd22", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103886, "uuid": "17ede380-63ac-414e-9f1d-4675a63b2e6e", "comment": "Malware payload", "value": "98a2c3ba4d2f904aac8dc2eef75cf2a2492cc9d71567fe82f199676fa36964f2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103886, "uuid": "1ec63462-8a47-46f7-a592-e32570280876", "value": "T1F0B423F193429E0B23A4DAB457E3DB3375CE7292769D9301CA06CA9F487072896DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103886, "uuid": "e4ab14c5-657c-4e59-b725-48538e9c6732", "value": "12288:Okmht7DrvdyiWCCH1oHF9nJ/qjuy2goJrrzTPwkl:OkmHzMrH1ELnK2goJnnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774103886, "uuid": "a53a41c6-97eb-4bc7-a6ac-ebf9d40945ab", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103886, "uuid": "0984758a-fce0-4aaf-8d48-3269b8aa0272", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fde8b561-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774104065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104065, "uuid": "076a0b3c-3e1d-4398-812d-27cd950fa8bf", "comment": "Malware payload", "value": "4563daacd4027ef78681e521a9106313", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104065, "uuid": "9f859031-a410-43d9-a768-46f85b30180a", "comment": "Malware payload", "value": "9b58b323c09027b3c22554371ff894c9a0c0e42742d3920e6e94839954547f47", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104065, "uuid": "2db1ba9a-2b64-4db9-963c-848ec829c23a", "value": "T1A6C42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADE7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104065, "uuid": "5f4605db-f404-48a5-b22e-8913ae01cf2e", "value": "12288:T6wlOMWROC/FTeHo22Qm7NzofOr68m4eA924EwCq:L4MQOC/gHozN7NzomW8+A91", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774104065, "uuid": "7814e826-41d4-4520-87d8-17023ae934ce", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104065, "uuid": "eb33c4a9-ec56-4a55-9826-72d97bebb4f7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdfd308d-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774104065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104065, "uuid": "05a9cf06-797f-489f-a583-1b441157702c", "comment": "Malware payload", "value": "131a0a4dfd0542bb2a7e3f47d0f00c9f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104065, "uuid": "cc393881-d5d5-4c18-93ad-9652de53f9c4", "comment": "Malware payload", "value": "5058ff9c04b41f075acd61bcf8e9893fc3f75897f1c06201d9fc1e50316422c2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104065, "uuid": "01a5fd3e-5c39-4563-a253-70dab58fd7eb", "value": "T15A55339A817C18C84F7D0A62BBBF955CB224CDFC100208672B7649AB353A7DBC3749", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104065, "uuid": "45a676f4-0cba-427f-b302-975dcd1007ca", "value": "24576:1oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRsYf+qG:1oZ9bq+MmMEL+hcjXHC/wnwdsq+qG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774104065, "uuid": "a3b99341-b14a-45d3-b18b-f2b48db6465c", "value": 1388193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104065, "uuid": "1a776991-6358-4994-a01e-e4aa3838666e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe26e9e0-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774104066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104066, "uuid": "049e075c-98a8-4017-bdea-41f3cdf104a2", "comment": "Malware payload", "value": "ce41d9c43c5900af390c58adf283a45e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104066, "uuid": "401186a0-b2ea-4e95-ad69-4669d5e29858", "comment": "Malware payload", "value": "2b48d0104874467ffb4f263050dbfde47b62d7a7bdac472f16ea4cd5f68aad80", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104066, "uuid": "75fcd406-c366-44b5-ae4c-bc4f935181d0", "value": "T14EC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104066, "uuid": "43c0e09c-87a1-448b-af8a-8dd9b67e0b1c", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mkeA924EwC2:b4MQOC/gHozN7NzomW8iA9R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774104066, "uuid": "729918e4-38ef-4d13-a9d7-eacbafa29f7b", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104066, "uuid": "d0c2971e-b489-4fa2-ba31-fe31cd0432dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff81a716-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774104068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104068, "uuid": "440893a9-e569-41aa-a67c-fcf6a2b21f19", "comment": "Malware payload", "value": "14ffd61cc7eb7372eadba6e8871a4aee", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104068, "uuid": "94486998-af99-4073-8b6e-b27eb227c588", "comment": "Malware payload", "value": "8bface63fd718134038e48298d1f0f7c1d4102235ee6eaf274fa97274346bd70", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104068, "uuid": "d9d188e9-4821-47da-910e-659c1c9a2ac8", "value": "T12855339A817C18C84F7D0A62BBBF955CB224CDFC100208672B7649AB353A7DBC3749", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104068, "uuid": "611399b0-e7f6-4371-bbaf-646e5db38a47", "value": "24576:/oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRaYf+qe:/oZ9bq+MmMEL+hcjXHC/wnwdaq+qe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774104068, "uuid": "08b23e2a-8a7c-4920-a8cf-8d58a26ca67d", "value": 1388193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104068, "uuid": "e97988a9-6fe7-4de3-a780-31c998b425d7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35d05bf3-2535-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774104589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104589, "uuid": "511ab4bb-9399-4690-b65a-59b4b23735e9", "comment": "Malware payload", "value": "913c9f0738a1c012a326c5111be4c10f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104589, "uuid": "ab024cf5-70c2-433a-b7ea-78303ee3783d", "comment": "Malware payload", "value": "73c1670448ba22107174af5b4852ab30a25147ad05eac3e53bf4cbf0ca6fa896", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104589, "uuid": "0955589a-a5ac-40da-8b12-6e509ec3af33", "value": "T15AF36F4A335460F4E17B9279CDA65A46E7B2787A07B1634E437443BA5F333906E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104589, "uuid": "b3668f0a-4a91-4d6b-89a3-5a2340e5b7da", "value": "58e55310d66c611cb140f28166224b10", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104589, "uuid": "b18fe0f6-8456-4ea2-b08f-a40a63e2ff8c", "value": "3072:S7nxofwnECrs6TxGrkHYq2KCTj4WIPww+gq9FN+yptH9UE+h4:hfwnECQ6TMrijkHIPb+rxH9UEP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774104589, "uuid": "f4590248-0da2-4029-8c7e-bf3800803d7d", "value": 168960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104589, "uuid": "1724b840-ea3e-478c-bbeb-63bd80a89c31", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ed257b7-2531-11f1-ba1a-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1774105309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105309, "uuid": "12c8021d-ed69-4432-b583-2e379d665dda", "comment": "Malware payload (NetSupport)", "value": "e1a209118fe83150bf77a8a838e87e86", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105309, "uuid": "8b84d421-0c1c-487d-a00c-c9c51b1e47a8", "comment": "Malware payload (NetSupport)", "value": "3604e386dcfa6c4d8316929538024adeb97cfecb478ab042a2efc378d7cb990f", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105309, "uuid": "c273e04c-7074-4bb3-8c95-74676405fcd1", "value": "T117B57C0BFCA014FAD1AAA1358963D1517A717C446F3213CB3A50B7781FB3BE0AA79B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105309, "uuid": "d80bdf72-928f-4c5a-8e24-730e37733242", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105309, "uuid": "c06258f7-d5d4-4324-b1cc-9cc572173948", "value": "24576:F7V0vdFK6fVNaaOCGXLYxLafDDcLg1jW7opUt8ICv2L0BS8ciD/QvUSgv5ScFcNL:F7Ol5f/aaOzXqeDDcejr/Qc3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774105309, "uuid": "b10fdee6-bc3f-4e32-adcb-734fe2ff1c07", "value": 2421488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105309, "uuid": "1d2da612-77d0-4fd6-bc73-de62671f8987", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7beccb34-190a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774105876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105876, "uuid": "c1868268-2388-458d-a901-e004263a6a00", "comment": "Malware payload (Mirai)", "value": "0d743ab91910850360107221526d2d25", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105876, "uuid": "29233bc8-2b84-443e-acc8-e1164d7287ab", "comment": "Malware payload (Mirai)", "value": "bac8eaae693e2d7b18b917d8c52e00eeefdc9bf1014b324a0b1ab16b7f3e13ef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105876, "uuid": "0a170c67-8635-4448-b321-3c39ec786d76", "value": "T1A8D33851B9829A27C5E123BFFA6E018D332563E4D2DE72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105876, "uuid": "ed93ecd6-c7e5-4f0f-9f5c-c949484ee176", "value": "3072:snFif7apx6XS+kUgpjWXQQKMs0u29wzulziQSc:sn8ZS+dQWXQQK5s9TeQSc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774105876, "uuid": "39864ec0-cf2d-47f4-9372-2c6f454d0013", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105876, "uuid": "bcdacadb-d921-4437-9cb8-86a4a669bd73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4509944-2538-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774106197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106197, "uuid": "0790c957-4639-4ac8-830c-ecddf9797156", "comment": "Malware payload", "value": "9de970d5fed25de1d986f423961b4a7c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106197, "uuid": "139b7990-a178-4b0b-9385-b4ee6962c0ef", "comment": "Malware payload", "value": "e6b10edbec70c4360faf8356adbf915aecb5485aa32444fa9fe95c36a1185711", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106197, "uuid": "88c07db1-bae4-4612-a6c5-0bfcc252359c", "value": "T1201169DA0376D000CD4B4F8434556694BEC8A7E9B6370AECD8CD85F6A28CE287155F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106197, "uuid": "b40ecd06-aef5-4d3a-a904-89785d072e0c", "value": "24:h0L5NIj4KBg82gWDgo/m3FtdlSWQdgmCvTHA:OLM4wg82gWDgo/m3FLlnQOmCvTg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774106197, "uuid": "417237e0-9e4e-4eb0-8fd8-58dd3320e994", "value": 1104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106197, "uuid": "479f91fb-dac9-4959-85d4-3a1772ee5639", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bf55c79-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774106209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106209, "uuid": "e7d40353-a6da-4da5-9b2c-e8fab9b735d4", "comment": "Malware payload (Mirai)", "value": "a2b58c193298cdd45bb91256c1438591", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106209, "uuid": "1885f3c5-739b-4615-8370-4c481265675b", "comment": "Malware payload (Mirai)", "value": "39d68839e8a19b23d13e68bae166b5ae36596fe9831decaf68d5f1d1e2f1588d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106209, "uuid": "60096eba-7883-482b-90c3-74c37e32954a", "value": "T1C6D35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89691F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106209, "uuid": "0f666baa-42d8-43a7-96d5-c529836e2c17", "value": "3072:CV0zui1ZhMHJCIqWrpP7OUK3y0uMg9FkiH:LP1Yiwd7OUKC0uMg3kiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774106209, "uuid": "071bdb62-528c-4366-b22d-5905f014da21", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106209, "uuid": "9f243c65-7337-4ddd-928c-fe15aaed3c79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40596026-18fe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774106692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106692, "uuid": "77aea5be-86ce-435c-b05f-e95af4ffbc3a", "comment": "Malware payload (Mirai)", "value": "e91dccd6d2a98519cffd0143d8111a54", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106692, "uuid": "6ed29ca3-65f7-408a-ba30-da441d778385", "comment": "Malware payload (Mirai)", "value": "7b9ba082df5fd5dbcba73175f3bba57ddccef25fce1512c0708367bbd0fb3859", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106692, "uuid": "7ce86dc4-7d02-4535-98ae-d8b8a9c66970", "value": "T1B3041905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106692, "uuid": "6d443ffc-bfce-493b-8242-b190761893e0", "value": "3072:t60NrtUpT/5dltGgXGGP9M4S8lrXwU2wonacrI40fCtZ1SD39rsJj/s9fx49SY2Z:t3nEr5dfHPq7UToac8uF9X0V6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774106692, "uuid": "f1ee3e98-8617-4289-b461-3f3deb1350a7", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106692, "uuid": "d599cddf-ba56-4d24-ba96-556d0ebfcc68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dc85da7-253c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774107582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107582, "uuid": "596750d4-c6da-4e54-8f4f-7bf3559edb82", "comment": "Malware payload", "value": "bfb4749a87d28d924c32fccbaeab3093", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107582, "uuid": "4a83a9a6-0bc0-4573-8830-1762118e5a72", "comment": "Malware payload", "value": "8fe03f304e765f1172b0ee497b16567e5baa90cca5b15fbb8b31bfd233d4dfdd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107582, "uuid": "2c0c8044-0477-4f4a-b6ca-29e8f98d3c71", "value": "T175B3975E2E228F6EF668873447B78A35976C33DA2AE1D644D59CC1041F2028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107582, "uuid": "506a1459-2b74-4351-b227-232689e47b94", "value": "1536:DblBjVqrIb/P5QW6lDoN/NdFAcFy2V7kVL7Eqceer:fl+quvEVTAcFvV7kVnEtx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774107582, "uuid": "4b357a29-9898-48db-982a-7b3337e221f5", "value": 109839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107582, "uuid": "8087b296-740a-42dc-8a30-3ad584d9255c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23abb05a-190b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774107728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107728, "uuid": "bdee4007-63c2-420d-93d1-c5e9243042d3", "comment": "Malware payload (Mirai)", "value": "bb73c96692a3b2becc1d8f9a14d8f35e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107728, "uuid": "2506d715-86c6-4083-890e-ff09a07b8252", "comment": "Malware payload (Mirai)", "value": "126bb7fe59f613f236a4e007a19b4952241162b3af3f8a41e1b2faefd6746f67", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107728, "uuid": "30ea4d0e-f197-4f2e-8829-80a9b954db17", "value": "T10EE34D8AF802DE7EFC0BE57E44670D15FA30A7613243172D529BFDA3AC321A65D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107728, "uuid": "431251ee-593c-4d97-8b7b-91d3cb551583", "value": "3072:luWypdcGShA/TtPq6ND6ZJ243nxl9XzrTmduH:gCGShArdDPAxl9TmduH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774107728, "uuid": "6f9d0204-11b6-4ce5-a291-1cc577720e3f", "value": 146888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107728, "uuid": "27e71669-a60c-42b2-9904-639a525ccace", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41dc1bb1-253d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774108045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108045, "uuid": "0e27dab9-047c-4dee-a048-ca7acbd7d1e1", "comment": "Malware payload", "value": "fa0ec974ca32f6553a39ad1f24f89b2e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108045, "uuid": "fb123e73-1c17-48f3-be47-dd1de8b6d741", "comment": "Malware payload", "value": "012634acf770f75ef6c1db4cfa54e9ea71d7e814e1650c9ec025ae19d2dec84f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108045, "uuid": "c11dbe14-4b0a-45fa-8a08-30d871369468", "value": "T1AB8308327588582A210B028FD263336C70EFD8E3D611E5B6F6F522344BA5EE176B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108045, "uuid": "a969374e-7ef3-4f5e-98e3-992818d37f76", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tLU3DXpdyr2pbnjWayVN/:XEKltp9tLkX/yr2pbjWnVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774108045, "uuid": "877c2100-6ab9-422e-b223-46cbde553126", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108045, "uuid": "a6b1ef10-49fd-4954-a814-7866621514a0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a78fcdab-253d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774108215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108215, "uuid": "14e20be7-e2c0-4f3c-96a6-0d10d076d5b2", "comment": "Malware payload", "value": "f217c15183fab93812701be36c3befb1", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108215, "uuid": "eb951f50-0dd6-4180-b81e-948c99f92165", "comment": "Malware payload", "value": "ef2e4709accbe3d62d8784596ab04e397fe815b6222c09a3fb002cee67f719bb", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108215, "uuid": "70d5d9d2-0b09-4e33-886e-67272bd7a8e1", "value": "T1BC545D4A776040F4D8679139C9A78A46E7B2B8550771A3CF13A443BD5F2B7E09E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108215, "uuid": "ffd9d3f0-d2e2-45cb-9911-f8b5f524a8b4", "value": "7c7c51c33ee21dccb68077e47572762c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108215, "uuid": "e8e29d74-46f8-461c-bf68-4d557cfced3f", "value": "6144:BXhHTJd/s30SoYIpAob4WDHRY4T5H2vQ8hb0YYpG1e+95gzenrz:ZpSIiWDZ8dzk+5r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774108215, "uuid": "42a0d483-6e4a-48c5-8143-e1c5d4d25f07", "value": 296960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108215, "uuid": "3d6f40d1-1857-4d42-8580-313c825c7033", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d47b056-2545-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774111446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111446, "uuid": "0607663b-bd0f-4815-b3c3-0ff2b389459c", "comment": "Malware payload", "value": "9d0e1ac3b83d8385809558a756d2c342", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111446, "uuid": "17543ed1-dfec-46d8-8ea3-f5bdc34253e5", "comment": "Malware payload", "value": "bfadf09c1952743657a9b95c8040d95a63a5a27a109312e6e29646ddf50568c5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111446, "uuid": "ac201139-52a2-4c81-8987-4755cea596ad", "value": "T141C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A8D9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111446, "uuid": "922e5040-caec-48d9-acdf-6c066b6175c2", "value": "12288:EyBXIs7rM1ccqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5g:pImQ1MEA/f0Za6TCXKBxe2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774111446, "uuid": "c3b64ee5-1dca-435e-853a-5ac70d7ed2a6", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111446, "uuid": "4d65cbc2-fae9-4230-bb92-b46d0ed3b1db", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c39f1113-255f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774122865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122865, "uuid": "8d41747c-6c10-4741-b5f7-5d3fa20fdc76", "comment": "Malware payload", "value": "95232312b2ee934ddd027a419ea4a194", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122865, "uuid": "0b794078-f7ae-4828-95ed-a6a22ddb80a6", "comment": "Malware payload", "value": "b168ace6e561ef4e7e7b27841ee569b9eeee715ccc4607677f6df8367516d665", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774122865, "uuid": "efbb6167-145c-4812-b6ab-8fa66272487d", "value": "T10A753A0BBC90A0A6C4AAD2328A6692827B707C450F3167D73F50B6BD1F77BE45E793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774122865, "uuid": "416a2392-b291-4912-8903-83dfc57963f2", "value": "49152:HKorb/TcvO90dL3BmAFd4A64nsfJvTTi28gBuqoID1:Ta", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774122865, "uuid": "1f3dc84b-d038-4382-bde9-b04ef3e8347c", "value": 1634304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774122865, "uuid": "10823b1e-0eba-4f10-be94-93b7e7edccbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c77c7dff-2566-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774125878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774125878, "uuid": "cee6a76a-9435-4ab4-9325-26e3d2c03603", "comment": "Malware payload (Mirai)", "value": "4eb9b2f4fe095778a69041118ba5e418", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774125878, "uuid": "05fef1ce-0f2e-4a4a-a923-498949337174", "comment": "Malware payload (Mirai)", "value": "c464feec58877073da2b7e628448b1c469eb0bebd1d83aac51554a14db903a42", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774125878, "uuid": "67327b02-6ce2-4c0b-867b-bd3185218348", "value": "T1F3142B5377224FA0D366C5720BB78B5A59EB02811EE298D1936CCB107F207A9285FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774125878, "uuid": "029e7924-f4a1-4b7a-a80f-881c28619a9e", "value": "3072:/CbyN0CLFHOKZFZgvxuxSZm/zr5T99SI03RHBnlbLzD7tBpa:62NVLdOKypuxS05T99z0hhlLztC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774125878, "uuid": "b7e9205e-ff4c-4b93-b9d3-6414f367efda", "value": 205240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774125878, "uuid": "8e42fc2e-c6c1-44c2-a658-acbd119c4fb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91d3649c-2568-11f1-ba1a-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1774126686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126686, "uuid": "8378814c-1d21-42e0-be3b-3ea9b790e307", "comment": "Malware payload (NetSupport)", "value": "a304339bcf4513e38ce074bbc8467ddc", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126686, "uuid": "e6104eab-37de-41dd-9fac-29a8754888d2", "comment": "Malware payload (NetSupport)", "value": "156f07882475104c324ab065f228791f57b826b6e9ab212f658fb55b0c00c425", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126686, "uuid": "36524653-6b60-4b3f-a476-3c066d8f5435", "value": "T177C56D77FCA304F9E5AAA135852391527A717C442F3153CB2AA0F3682F73BE09A797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126686, "uuid": "c3e3acbb-449d-4a56-9d9d-0f69084877b4", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126686, "uuid": "078e273a-49ef-4b21-a384-31f0dbd87302", "value": "49152:Vt/cqLw88jfaK6M1HiQHpVm/9SgjSyQc3XxO:VtGP6MFm/gt0xO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774126686, "uuid": "d8f8a41d-1795-4c9d-9f85-c4815d225b01", "value": 2509880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126686, "uuid": "0dbac7a7-ff52-4c16-a1cc-762b7ea5fcf9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051388, "uuid": "57e10f4b-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int4view.virtualgatekeeper.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051456, "uuid": "803ab630-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.36.142:37299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051456, "uuid": "8053b8c9-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.119.62:56572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051577, "uuid": "c83defc3-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.9:44374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051628, "uuid": "e6c4cc3b-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.26.133:45183/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051688, "uuid": "0a836838-24ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld1proc.dynamictelemetry.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774051870, "uuid": "76ef84ff-24ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.79.225:42661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052047, "uuid": "e046d8f4-24ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld2point.dynamictelemetry.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052169, "uuid": "2903d2f8-24bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.99:43722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052407, "uuid": "b7666749-24bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld3view.dynamictelemetry.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052542, "uuid": "0765df2c-24bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.60.49.228:56310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774052711, "uuid": "6c5d9371-24bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld4path.dynamictelemetry.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774053066, "uuid": "4031ac7c-24bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.coreconnectivity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774053127, "uuid": "648ebef8-24bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.26.133:45183/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774053368, "uuid": "f4255120-24bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2outer.coreconnectivity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774053730, "uuid": "cbbd3945-24be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3field.coreconnectivity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774054027, "uuid": "7c9efb04-24bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.206:48057/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774054086, "uuid": "a0287f5e-24bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4space.coreconnectivity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774054089, "uuid": "a1e09b68-24bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:58531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774054334, "uuid": "33e69ed6-24c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.60.49.228:56310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774054448, "uuid": "77c4662c-24c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int1proc.systemicvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774054746, "uuid": "29821141-24c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int2steel.systemicvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055047, "uuid": "dca128a5-24c1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int3core.systemicvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055225, "uuid": "46fee458-24c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:38885/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055232, "uuid": "4abe81b7-24c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.191.141:34399/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055234, "uuid": "4c2cbeac-24c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.191.141:34399/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055407, "uuid": "b2fd6570-24c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int4sat.systemicvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055593, "uuid": "223c4fb0-24c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.187.132:42128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774055768, "uuid": "8a535384-24c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld1infra.logicflowmanager.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774056067, "uuid": "3c7b302d-24c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld2proxy.logicflowmanager.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774056126, "uuid": "5fdb5230-24c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.86.122:35733/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774056425, "uuid": "1238b47d-24c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld3data.logicflowmanager.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774056427, "uuid": "137f8dd7-24c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.183.28:56025/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774056786, "uuid": "e9385d2b-24c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vld4point.logicflowmanager.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774057626, "uuid": "de29d7d7-24c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:51331/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774057627, "uuid": "dea40823-24c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.243.237:49390/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774057987, "uuid": "b549009b-24c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk1sync.distributedledger.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774058226, "uuid": "43943981-24c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.184.233:53468/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774058587, "uuid": "1ac4fe82-24ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk2data.distributedledger.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774058826, "uuid": "a95aafa6-24ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.243.237:49390/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774058827, "uuid": "a9f9c94e-24ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk3edge.distributedledger.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059126, "uuid": "5bee4960-24cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.208.89:43379/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059127, "uuid": "5ca2e9c3-24cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:51331/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059247, "uuid": "a43aff6c-24cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk4static.distributedledger.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059426, "uuid": "0e7f348b-24cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.184.233:53468/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059546, "uuid": "5668bf24-24cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt1meta.integritychecker.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059798, "uuid": "ec4c7962-24cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.192.30:56363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774059908, "uuid": "2e19e9c8-24cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt2proc.integritychecker.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060210, "uuid": "e1ee69c6-24cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt3gate.integritychecker.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060565, "uuid": "b5ec8968-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt4sync.integritychecker.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060585, "uuid": "c1d4fec7-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.147.241:39678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060627, "uuid": "dad97537-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.201.44:47196/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060697, "uuid": "0421d937-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.192.30:56363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060870, "uuid": "6b5e47c3-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg1store.resourcebalancer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060926, "uuid": "8c8eb40f-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.15:34218/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774060931, "uuid": "8f936053-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.102.2:47908/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061109, "uuid": "f9ae6d0f-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8717422379/VMa1dJb.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061227, "uuid": "408bbb0f-24d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg2remote.resourcebalancer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061530, "uuid": "f4fa0db6-24d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.96:53562/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061586, "uuid": "16428d3c-24d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg3dev.resourcebalancer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061661, "uuid": "42d5dfbe-24d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.240.76:37354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774061886, "uuid": "c8cfe52f-24d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg4link.resourcebalancer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774062187, "uuid": "7c7fff15-24d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk1proc.endpointvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774062607, "uuid": "7709269e-24d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk2power.endpointvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774062727, "uuid": "be6e1fea-24d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.29.237:59059/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774062908, "uuid": "2a76a564-24d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk3local.endpointvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063042, "uuid": "7a306cc3-24d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.240.76:37354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063267, "uuid": "ffece229-24d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk4work.endpointvalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063327, "uuid": "240c42d9-24d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.102.2:47908/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063328, "uuid": "248c1c7b-24d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.96:53562/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063567, "uuid": "b2cb45d9-24d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt1infra.protocolanalyzer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063866, "uuid": "656c2d50-24d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7556497175/vDnC6Bk.ps1", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774063928, "uuid": "8a05b86a-24d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt2base.protocolanalyzer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064226, "uuid": "3bfa6c23-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:33188/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064226, "uuid": "3bfa70d1-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt3user.protocolanalyzer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064226, "uuid": "3c054aae-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.29.237:59059/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064291, "uuid": "628b754a-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.44.4:34819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064407, "uuid": "a78a3b78-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7776573655/sTOae3E.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064527, "uuid": "ef065423-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.136:45041/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064586, "uuid": "12a6bab7-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt4link.protocolanalyzer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064826, "uuid": "a1905063-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.136:45041/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064900, "uuid": "cd4e7c9f-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.68:36462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064900, "uuid": "cdcbfa57-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.88.42:34819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774064947, "uuid": "e9d02d58-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg1proc.interfacehandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774065246, "uuid": "9c0e8d92-24d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg2core.interfacehandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774065257, "uuid": "a27928e3-24d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:33188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774065559, "uuid": "56461c4a-24da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.68:36462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774065726, "uuid": "b9a6ad68-24da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.45.186.63:42009/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774065907, "uuid": "25797dc2-24db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg4view.interfacehandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066026, "uuid": "6ca2b049-24db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:58315/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066027, "uuid": "6d356db7-24db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.137.93:37789/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066326, "uuid": "1f45af55-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk1proc.gatewayprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066328, "uuid": "20b81172-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:38850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066571, "uuid": "b1414f93-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk2point.gatewayprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066644, "uuid": "dcdfdd0b-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.71:60901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066646, "uuid": "de628ace-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.248:45134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066998, "uuid": "b033af29-24dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.225.35.233:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774066999, "uuid": "b0736393-24dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.67.248:45134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067226, "uuid": "3822f3d8-24de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.212.176:46170/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067228, "uuid": "3919a1bf-24de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.158:50594/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067526, "uuid": "eaae8985-24de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:58315/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067526, "uuid": "eabecddb-24de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.137.93:37789/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067596, "uuid": "14c1925d-24df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.71:60901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067648, "uuid": "33a54c2f-24df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk4path.gatewayprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067886, "uuid": "c19d58b4-24df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt1proc.terminalobserver.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067897, "uuid": "c7a41436-24df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.219.216.183:55240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774067954, "uuid": "e9b6cde3-24df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.135:52715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774068131, "uuid": "53468d86-24e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.187.183:43278/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774068310, "uuid": "be4c6c24-24e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.135:52715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774068366, "uuid": "df7bbd03-24e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt2outer.terminalobserver.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774068546, "uuid": "4a8bd5c4-24e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt3field.terminalobserver.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774068560, "uuid": "53296cde-24e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.153.152.117:41069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774068727, "uuid": "b686912d-24e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rt4space.terminalobserver.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774069326, "uuid": "1bdf1f3e-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg1proc.networkoptimizer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774069328, "uuid": "1cc8b119-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.196.214:50177/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774069568, "uuid": "ac123914-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg2steel.networkoptimizer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774069627, "uuid": "cf11e5b2-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.123.145.110:35050/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774069753, "uuid": "1a0de133-24e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg3core.networkoptimizer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070109, "uuid": "ee6b219c-24e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cfg4sat.networkoptimizer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070118, "uuid": "f3f76326-24e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.153.152.117:41069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070407, "uuid": "a03e61a3-24e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk1infra.datacenterstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070483, "uuid": "cd67d915-24e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.176.116.4:55008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070526, "uuid": "e72bfdad-24e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.212.176:46170/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070661, "uuid": "3724f9a2-24e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.18:54085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070767, "uuid": "76c4ec53-24e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk2proxy.datacenterstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774070826, "uuid": "997534e5-24e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.196.214:50177/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071127, "uuid": "4d2f0b75-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:57401/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071127, "uuid": "4d4301f7-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk3data.datacenterstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071128, "uuid": "4d71e4bc-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.123.145.110:35050/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071128, "uuid": "4d8e5ba9-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.13:47351/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071369, "uuid": "dd6dece6-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://msk4point.datacenterstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071727, "uuid": "b2fed797-24e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.83:38165/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071913, "uuid": "2189d801-24e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.176.116.4:55008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774071972, "uuid": "4489c1c2-24e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.18:54085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072026, "uuid": "6512f22b-24e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.143:42587/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072266, "uuid": "f3d5997d-24e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://our.datacenterstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072388, "uuid": "3ce7164f-24ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.72.131:56098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072512, "uuid": "868b95d4-24ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.219.216.183:55240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072626, "uuid": "cac0ea34-24ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://web3.terminalobserver.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072810, "uuid": "384c3df3-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.243:59105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072810, "uuid": "38565585-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:39852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072927, "uuid": "7e15c9ee-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:57401/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072943, "uuid": "8756f68f-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.19.104:50607/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774072987, "uuid": "a1ac9777-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ytp1swow.fotestat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073059, "uuid": "ccc83509-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.42.62:37164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073060, "uuid": "cd3fa806-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.95.200:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073110, "uuid": "eb1644e9-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.29:51625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073347, "uuid": "781af1a2-24ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://validat-gri.tatneft.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073479, "uuid": "c6e46afb-24ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.72.131:56098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073528, "uuid": "e41a9f33-24ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.138.83:38165/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774073646, "uuid": "2a8f4bf8-24ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uf0t.scrollnft.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774074025, "uuid": "0c97a8da-24ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.17.77:54608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774074255, "uuid": "95b06422-24ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.42.62:37164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774074376, "uuid": "dd8c2286-24ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.243:59105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075026, "uuid": "61027b20-24f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.143:42587/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075091, "uuid": "87ee3e7f-24f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.124.46:60213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075327, "uuid": "14aa2905-24f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.206:49456/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075571, "uuid": "a5affbd9-24f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.167.107:47221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075635, "uuid": "cc435cf5-24f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.66.109:40467/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075927, "uuid": "7a2bca8f-24f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.16.123:36010/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774075996, "uuid": "a38eed25-24f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:58715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774076359, "uuid": "7b921d65-24f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.44.36:55035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774076827, "uuid": "925b3c7d-24f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.102.113:54445/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774076896, "uuid": "bba194d4-24f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:46916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774077138, "uuid": "4bbde05a-24f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.167.107:47221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774077559, "uuid": "469935f4-24f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:58715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774077669, "uuid": "8859d86a-24f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.44.36:55035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774077727, "uuid": "ab05e3bb-24f6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.16.123:36010/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774077969, "uuid": "3b117620-24f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.124.46:60213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774078026, "uuid": "5d0e5784-24f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.102.113:54445/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774078518, "uuid": "82ac8cfb-24f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.64.129:48625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774078572, "uuid": "a280a93f-24f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:46916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774078747, "uuid": "0b3cea4a-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xgj9.fotestat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774078927, "uuid": "766322f0-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://byte-ster.tatneft.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774078987, "uuid": "99e693f0-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.225.143:41420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079051, "uuid": "c02c1128-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.54.121:37529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079167, "uuid": "0527e10a-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc.networkoptimizer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079226, "uuid": "28970db5-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.149:51717/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079407, "uuid": "94788775-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p01nt.logicflowmanager.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079408, "uuid": "95065927-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.126.126:57736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079767, "uuid": "6ae27fb9-24fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshbuil.protdast.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774079955, "uuid": "dac1f503-24fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.218:34909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080067, "uuid": "1dbcad98-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rela-labe.protdast.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080247, "uuid": "88df4d66-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quot-hidd.protdast.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080248, "uuid": "89f13039-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.64.129:48625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080428, "uuid": "f4f3230f-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.114.213:53561/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080435, "uuid": "f906171f-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.225.143:41420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080726, "uuid": "a6bbf42b-24fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.149:51717/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080786, "uuid": "ca5cf867-24fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://laneserv.protdast.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774080854, "uuid": "f3220f55-24fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:41452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081157, "uuid": "a7589b26-24fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.126.126:57736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081267, "uuid": "e8e3c003-24fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xpj5ocpo.way2dot.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081337, "uuid": "12a17689-24ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:43153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081566, "uuid": "9b31f844-24ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f1am3-sheet.way2dot.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081752, "uuid": "09ef4cec-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.218:34909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081819, "uuid": "32220f9c-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:46747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081930, "uuid": "7404e46a-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.114.213:53561/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774081989, "uuid": "97892d69-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr4n-spool.way2dot.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082106, "uuid": "dd3a1ac9-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:59254/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082116, "uuid": "e334e0d1-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.138.43.79/cat.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082118, "uuid": "e45c767b-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://harvestedit.doabove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082118, "uuid": "e46f3710-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://anch0-bridge.withregw.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082119, "uuid": "e494c063-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ravenreview.currvers.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082119, "uuid": "e49c71e9-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main4point.metrichandler.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082119, "uuid": "e4cd7104-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://mercoreet5.doabove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082119, "uuid": "e4fd3f59-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main2proxy.metrichandler.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082120, "uuid": "e58e491a-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit4sat.terminalvariable.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082120, "uuid": "e5ad177a-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://rav3n-span.gothrough.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082121, "uuid": "e606f3a9-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main3data.metrichandler.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082121, "uuid": "e656708e-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://visualfier.dombove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082122, "uuid": "e65dba99-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://proto-h4ul.withregw.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082122, "uuid": "e675852f-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main1infra.metrichandler.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082122, "uuid": "e6eccfd5-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://neo-rnount.withregw.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082124, "uuid": "e790b272-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://reef-dat.doabove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082124, "uuid": "e7959eea-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ndakntj.currvers.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082125, "uuid": "e85361a2-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://file-herunterladen.site/1.php?s=E09129DF-23E3-416A-82E8-F1D276733DDC", "Tag": [ { "name": "boxter", "colour": "#4aba55", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082125, "uuid": "e88c249b-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://streamnoble.gothrough.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082125, "uuid": "e89a3f03-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit3core.terminalvariable.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082125, "uuid": "e8a3d31b-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://dusdyna.dombove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082126, "uuid": "e8ed445c-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://delivergolden.gothrough.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082126, "uuid": "e8f58665-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://frozenlayout.currvers.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082126, "uuid": "e8face19-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://kel-nexis.currvers.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082126, "uuid": "e8fae795-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://fsrwr05.dombove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082126, "uuid": "e90f3230-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:41452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082126, "uuid": "e90f3450-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://arktideix1.dombove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082127, "uuid": "e99937f0-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://opticsval.withregw.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082127, "uuid": "e9a1c800-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://normarkal9.gothrough.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082127, "uuid": "e9c94cc4-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://trilineix.doabove.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082127, "uuid": "e9e4b739-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://iwug.gothrough.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082128, "uuid": "ea195278-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unwitting.fluxobase.info/avoidsynthetic", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082128, "uuid": "ea27a9cd-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit2steel.terminalvariable.in.net/verification.google/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774082130, "uuid": "eb724f43-2500-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.143/sshbins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083010, "uuid": "f816e741-2502-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpz2.way2dot.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083011, "uuid": "f8657567-2502-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.41:56710/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083011, "uuid": "f86ef80d-2502-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://thairefaruq.com/surionimyeaqa.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083015, "uuid": "faa8093e-2502-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://needlegene.respecti.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083029, "uuid": "03665b6b-2503-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.0:46923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083029, "uuid": "036e8429-2503-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:43153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083127, "uuid": "3df654ee-2503-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://umhbryzn.respecti.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083147, "uuid": "49bfad38-2503-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.63.144:59050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083426, "uuid": "f029ddbc-2503-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.41:56710/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083427, "uuid": "f092ba09-2503-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.73.21:54529/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083610, "uuid": "5da5f593-2504-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://secureswift.respecti.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083622, "uuid": "64a61e86-2504-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.0:46923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083726, "uuid": "a2fc7203-2504-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.246.1:50277/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083932, "uuid": "1d4fe5fc-2505-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.57.113:52552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774083967, "uuid": "3269a63c-2505-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sollithal.respecti.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774084328, "uuid": "09b80bfe-2506-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://convertdri.bravevro.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774084575, "uuid": "9c83704c-2506-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.213:55068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774084809, "uuid": "28010ef2-2507-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-lineis.bravevro.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774084823, "uuid": "308af9bf-2507-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:55723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774084947, "uuid": "7abf16ac-2507-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.110.135:57372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085170, "uuid": "ff1f7847-2507-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://firmwarevale.bravevro.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085301, "uuid": "4d522855-2508-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.161.127:49625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085527, "uuid": "d3e64b22-2508-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gfdrj.bravevro.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085527, "uuid": "d40e5d3c-2508-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.246.1:50277/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774085948, "uuid": "cf48f591-2509-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xmr14.worldcla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086128, "uuid": "3a92dbad-250a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.82.221:60243/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086196, "uuid": "62bbc618-250a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.81:34477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086196, "uuid": "6302655c-250a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.213:55068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086256, "uuid": "86fcabaa-250a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.81:34477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086368, "uuid": "c98b0e84-250a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trail1-grid.worldcla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086560, "uuid": "3bff3e9f-250b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.155.246/1", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086623, "uuid": "61471e33-250b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:55723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774086788, "uuid": "c3f96879-250b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://discovership.worldcla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087025, "uuid": "50dfa751-250c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:56419/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087025, "uuid": "5153ce9b-250c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/yltrmpfsxc2jyxxm84ncc/18c695e53103a5b1.exe?rlkey=110pap7hysyafcov26l8z20lw&st=yhqy3ufv&dl=1", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "StealitStealer", "colour": "#f38ed4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087163, "uuid": "a32f761b-250c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.237:44893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087387, "uuid": "28b90daa-250d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8531638373/9Hbhrms.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087401, "uuid": "31172c88-250d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeftasarim.com/lefter", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087402, "uuid": "318c3ae2-250d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.161.127:49625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087446, "uuid": "4c1c174a-250d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trivaleum7.worldcla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087627, "uuid": "b79963de-250d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.82.221:60243/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087627, "uuid": "b79cec21-250d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://by42.officeco.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774087990, "uuid": "907295fe-250e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ts9qv.officeco.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088227, "uuid": "1d62dd30-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.229.198:35585/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088286, "uuid": "40bb25d4-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer-graph.officeco.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088346, "uuid": "64a84480-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://repost.punto-viva.info/firewall_policy.conf", "Tag": [ { "name": "dropped-by-ACRStealer", "colour": "#09d49d", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088354, "uuid": "68f8050c-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.191:40245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088354, "uuid": "695413e2-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.246.6:55087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088466, "uuid": "ac0e483d-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickstep.fluxobase.info/culpableheadache", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "dropped-by-ACRStealer", "colour": "#09d49d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088597, "uuid": "fa21b6db-250f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.161.250:37416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088661, "uuid": "204800f0-2510-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.50.70.34:52892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088721, "uuid": "43e361fe-2510-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.237:44893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774088770, "uuid": "61586ac6-2510-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1nic3-point.officeco.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089069, "uuid": "135ea03c-2511-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://sbstorage.club/z/abandonedly.vmp.exe", "Tag": [ { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089077, "uuid": "185516e6-2511-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.50.70.34:52892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089127, "uuid": "36076a61-2511-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu3ry-glow.fileost.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089608, "uuid": "546a5656-2512-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4st-logic.fileost.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089731, "uuid": "9dd2b898-2512-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.102.170:40067/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089966, "uuid": "2a15bd83-2513-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reportobserve.fileost.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774089968, "uuid": "2b194316-2513-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sbstorage.club/012378DS.VDW", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774090329, "uuid": "02a9830a-2514-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://0ak-plate.fileost.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774090458, "uuid": "4f6e3767-2514-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.205.151:53859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774090626, "uuid": "b38e75c7-2514-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.229.198:35585/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774090687, "uuid": "d7df0c8b-2514-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.161.250:37416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774090746, "uuid": "fb1eb0f9-2514-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xxkvm5.temprock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774091109, "uuid": "d34da084-2515-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gwqs23ca.temprock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774091239, "uuid": "20c43c92-2516-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.191:40245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774091588, "uuid": "f0a5fffa-2516-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ijl3voy.temprock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774091827, "uuid": "7f807491-2517-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.102.170:40067/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774091893, "uuid": "a6c895f6-2517-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.98.152:45905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774091946, "uuid": "c610f5f5-2517-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shad-wave.temprock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092259, "uuid": "8083db32-2518-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.112:44694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092365, "uuid": "c03bfc30-2518-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://runwa1-path.getverif.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092381, "uuid": "c97c54de-2518-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.112:39115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092437, "uuid": "eabce3de-2518-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:48380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092438, "uuid": "eb4721b4-2518-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.205.151:53859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092727, "uuid": "97d03b74-2519-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelvenum.getverif.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774092985, "uuid": "314695de-251a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.98.152:45905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774093149, "uuid": "9322175e-251a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unl25bit.getverif.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774093221, "uuid": "be2768fc-251a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.61:44889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774093221, "uuid": "be5eb1cc-251a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.127:55448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774093446, "uuid": "44917620-251b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://compr-hinge.getverif.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774093867, "uuid": "3f3c659d-251c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://forgeledg.clocknet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774093927, "uuid": "62ed8a6c-251c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.48.108:45098/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774094227, "uuid": "15d6974e-251d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.215:34107/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774094238, "uuid": "1c2f962a-251d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.127:55448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774094359, "uuid": "645a28c2-251d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:48380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095314, "uuid": "9df5571f-251f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.112:44694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095426, "uuid": "e04db48b-251f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.215:34107/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "2852ce48-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Benbi123/dev-dotfiles/raw/refs/heads/main/src/pages/dotfiles_dev_v1.5-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "28678ef9-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Benbi123/benbi123.github.io/refs/heads/main/obeisantly/benbi-github-io-Mesosauria.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "28679775-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Benbi123/dev-dotfiles/refs/heads/main/src/pages/dotfiles_dev_v1.5-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "2867d07a-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rickyrakasiwi/bazzite-deck-plasma-mobile/refs/heads/main/recipes/plasma_mobile_deck_bazzite_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "287b31d4-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Benbi123/benbi123.github.io/raw/refs/heads/main/obeisantly/github-benbi-io-v3.1-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "2889fed2-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Benbi123/benbi123.github.io/refs/heads/main/obeisantly/github-benbi-io-v3.1-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095547, "uuid": "2890317c-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rickyrakasiwi/rickyrakasiwi.github.io/refs/heads/main/dispersity/github_io_rickyrakasiwi_v2.4-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095548, "uuid": "295a007d-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rickyrakasiwi/bazzite-deck-plasma-mobile/raw/refs/heads/main/recipes/plasma_mobile_deck_bazzite_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095550, "uuid": "2a8998e8-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rickyrakasiwi/rickyrakasiwi.github.io/raw/refs/heads/main/dispersity/github_io_rickyrakasiwi_v2.4-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095551, "uuid": "2aadeef9-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Benbi123/benbi123.github.io/raw/refs/heads/main/obeisantly/benbi-github-io-Mesosauria.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095731, "uuid": "96778edf-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.245.106:40160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095848, "uuid": "dc35c27d-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Gaelonchas/gaelonchas.github.io/raw/refs/heads/main/holdable/gaelonchas-github-io-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095849, "uuid": "dc643a5c-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Gaelonchas/gaelonchas.github.io/refs/heads/main/holdable/gaelonchas-github-io-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095849, "uuid": "dc9bb852-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Gaelonchas/producthunt-skills/raw/refs/heads/main/skills/analytics/ph-analytics-setup/skills_producthunt_v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095849, "uuid": "dcc49633-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Gaelonchas/producthunt-skills/refs/heads/main/skills/analytics/ph-analytics-setup/skills_producthunt_v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774095851, "uuid": "ddfb94dd-2520-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.113:50050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774096211, "uuid": "b463d2f8-2521-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.245.106:40160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774096649, "uuid": "b9221daf-2522-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.65.34:38168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774097534, "uuid": "c8cbc03d-2524-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.113:50050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774097768, "uuid": "548d1d45-2525-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8520831842/YKvV4YH.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774097826, "uuid": "7736003d-2525-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.186.97:54679/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774097828, "uuid": "786bd6a9-2525-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.11.29:54382/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774097839, "uuid": "7ec5bb18-2525-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.89:53263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774097887, "uuid": "9b0b4c13-2525-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8531638373/ELPdXJY.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774098426, "uuid": "dca199fb-2526-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.191:33247/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774098623, "uuid": "521f2afe-2527-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.154.230:36356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774098738, "uuid": "96ba4fcf-2527-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.42.57:36801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774098908, "uuid": "fbd2cf8f-2527-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://677jb7co.goldsys.digital/?=check&&actmn=KhQyOtBACJsezVQW", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774098975, "uuid": "239c2c75-2528-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.76.94:59470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099025, "uuid": "41d92b07-2528-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p2pdany.com/80fXtpKVFi.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099086, "uuid": "65bf9c95-2528-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mingloria.com/6xbiXvE9b8.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099092, "uuid": "69b59d89-2528-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.158.74.30:34451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099400, "uuid": "21275fda-2529-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.89:53263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099878, "uuid": "3dd9ac79-252a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.17:39399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099927, "uuid": "5b3bd912-252a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/1781548144/JKon0XP.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774099996, "uuid": "842a86d7-252a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.140:57679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100117, "uuid": "cc38c873-252a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.154.230:36356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100527, "uuid": "c0c2e69d-252b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8531638373/QWFfVk7.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100536, "uuid": "c66c0935-252b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.158.74.30:34451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100725, "uuid": "36f0b8f8-252c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.91.145:50712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100896, "uuid": "9cbff05a-252c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.14.84:36428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774100953, "uuid": "bec8355a-252c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.17:39399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774101072, "uuid": "05d651ac-252d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.76.94:59470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774101615, "uuid": "496e80ff-252e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:38623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774102027, "uuid": "3ecb2817-252f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.12.255.0:58626/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774102091, "uuid": "652308c0-252f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.91.145:50712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774102265, "uuid": "cd094680-252f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://horbusten.com/2jYoFsuhVe.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774102395, "uuid": "1a7d9915-2530-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.14.84:36428/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774102759, "uuid": "f31099c2-2530-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.127:38623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774102994, "uuid": "7f7a8780-2531-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://labquick.hugeflow.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103228, "uuid": "0ac3cefd-2532-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.34:57074/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103346, "uuid": "50fdb9b5-2532-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://riv3r-sheet.sleepbut.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103528, "uuid": "bd6e4c2e-2532-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.12.255.0:58626/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103598, "uuid": "e75c78e3-2532-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.147.68:52548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103767, "uuid": "4c039c5e-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorcoreet.sleepbut.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103826, "uuid": "6f393363-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:40149/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103886, "uuid": "9304fea1-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aofkachi/aofkachi.github.io/raw/refs/heads/main/laryngemphraxis/github_io_aofkachi_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103886, "uuid": "93174198-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aofkachi/react-native-template-app/raw/refs/heads/main/android/app/src/main/res/native-react-app-template-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103887, "uuid": "939b3685-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aofkachi/aofkachi.github.io/refs/heads/main/laryngemphraxis/github_io_aofkachi_v2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103888, "uuid": "94433f6d-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aofkachi/react-native-template-app/refs/heads/main/android/app/src/main/res/native-react-app-template-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774103902, "uuid": "9c662f75-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:55687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104065, "uuid": "fdf7cc44-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/overcovde/cloud-code/refs/heads/master/.vscode/code-cloud-v1.4-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104066, "uuid": "fe085a4e-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/overcovde/all-working-quest-mods/raw/refs/heads/main/keelboatman/working-quest-all-mods-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104066, "uuid": "fe3602b7-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/overcovde/overcovde.github.io/raw/refs/heads/main/hypnologist/github_io_overcovde_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104067, "uuid": "fecfd318-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/overcovde/all-working-quest-mods/refs/heads/main/keelboatman/working-quest-all-mods-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104068, "uuid": "ff6d2ecd-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/overcovde/cloud-code/raw/refs/heads/master/.vscode/code-cloud-v1.4-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104068, "uuid": "ff8eb949-2533-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/overcovde/cloud-code/raw/refs/heads/master/.vscode/cloud_code_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104070, "uuid": "006b7989-2534-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/overcovde/cloud-code/refs/heads/master/.vscode/cloud_code_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104126, "uuid": "222e5d6d-2534-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/overcovde/overcovde.github.io/refs/heads/main/hypnologist/github_io_overcovde_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104127, "uuid": "22aeed6e-2534-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.221:46078/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104127, "uuid": "22cd262c-2534-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://str3-scope.sleepbut.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104428, "uuid": "d5eff694-2534-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.48.189:38418/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104547, "uuid": "1cd4ef37-2535-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://formaass.sleepbut.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104680, "uuid": "6c103424-2535-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.36:57598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104726, "uuid": "87aec51d-2535-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.34:57074/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104731, "uuid": "8a933ac6-2535-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.228:52941/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774104797, "uuid": "b23b6b65-2535-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.194.147.68:52548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105024, "uuid": "3939d13f-2536-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.221:46078/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105026, "uuid": "3a7ba565-2536-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.81.35:56490/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105102, "uuid": "67aed07a-2536-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:55687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105265, "uuid": "c931b51f-2536-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sxiy.deepglom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105510, "uuid": "5ad7bc6b-2537-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://silenparser.deepglom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105925, "uuid": "52a10de7-2538-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.184.48.189:38418/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774105927, "uuid": "53d14f8e-2538-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://9uhve7s.deepglom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106065, "uuid": "a5e07794-2538-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:60166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106120, "uuid": "c6c2ec76-2538-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:42859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106123, "uuid": "c8818bb1-2538-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.116.247:51333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106527, "uuid": "b932b1d9-2539-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.185:43377/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106655, "uuid": "058cdaf8-253a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xpm713mg.deepglom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106827, "uuid": "6c04ca9c-253a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://spectrumdaemon.deepglom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106834, "uuid": "70552bc5-253a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.16.57:58507/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774106975, "uuid": "c4340cda-253a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.219.90:39951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107075, "uuid": "ffabe781-253a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.219.90:39951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107127, "uuid": "1ebaf191-253b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.13.220:51214/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107127, "uuid": "1eef86c1-253b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.185:43377/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107135, "uuid": "2373cded-253b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.215.31:54039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107188, "uuid": "430c2a6b-253b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://abhd27da.grovopen.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107372, "uuid": "b09a5961-253b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:42859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107561, "uuid": "215d853d-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.94.97:38494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107611, "uuid": "3f0d3bff-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://z5odl9.grovopen.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107628, "uuid": "492f0771-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.95.252:53364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107727, "uuid": "845a2afc-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:45296/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107740, "uuid": "8c619de1-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.116.247:51333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107787, "uuid": "a8260387-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/neo/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774107909, "uuid": "f0bf30be-253c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5p4r-node.grovopen.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108027, "uuid": "376bd67e-253d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.42:49988/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108101, "uuid": "6374b560-253d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.94.97:38494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108208, "uuid": "a319059b-253d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bhkpzpne.grovopen.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108280, "uuid": "ce1f58cf-253d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.235.224:49882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108327, "uuid": "e9c93a2b-253d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.16.57:58507/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108568, "uuid": "79ad5090-253e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://partne2-field.grovopen.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108626, "uuid": "9c6be3a9-253e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.13.220:51214/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108868, "uuid": "2c9833bf-253f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1sync.streamdatahandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108902, "uuid": "4094a5a9-253f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.85.192:34475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108927, "uuid": "4f76a17c-253f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.149.244:44568/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774108996, "uuid": "78add4d7-253f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.215.31:54039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774109288, "uuid": "2690a24b-2540-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2data.streamdatahandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774109525, "uuid": "b459adea-2540-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:45296/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774109586, "uuid": "d8c124e9-2540-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc3edge.streamdatahandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774109828, "uuid": "68ef7477-2541-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.235.224:49882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774109950, "uuid": "b188864a-2541-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4static.streamdatahandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774110247, "uuid": "628d0d4a-2542-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv1meta.cloudinfrastructure.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774110437, "uuid": "d36d9712-2542-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.85.192:34475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774110787, "uuid": "a40f015d-2543-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7115306239/Qub5kf3.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774110850, "uuid": "c9b05a33-2543-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.217.85:57547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774110910, "uuid": "edd5c53a-2543-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv3gate.cloudinfrastructure.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111027, "uuid": "338bd186-2544-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.65.34:38168/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111028, "uuid": "33f2767b-2544-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.160:39860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111266, "uuid": "c2028bcd-2544-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv4sync.cloudinfrastructure.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111446, "uuid": "2d53d4fd-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Marzit36/SlipStreamGUI/raw/refs/heads/main/assets/Slip_GUI_Stream_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111446, "uuid": "2d58b40b-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Marzit36/SlipStreamGUI/refs/heads/main/assets/Slip_GUI_Stream_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111457, "uuid": "33a539be-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.189:39756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111457, "uuid": "33d69188-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.165.197:42272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111535, "uuid": "624295c6-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.217.85:57547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111626, "uuid": "987fd9fa-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node1store.securityframework.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111757, "uuid": "e69882a6-2545-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.223.111:51933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774111926, "uuid": "4afd7a7c-2546-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2remote.securityframework.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774112018, "uuid": "82453358-2546-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.194.174:52033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774112225, "uuid": "fd3d9064-2546-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3dev.securityframework.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774112588, "uuid": "d5c2272b-2547-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node4link.securityframework.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774112827, "uuid": "643a8ef4-2548-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.217.97:39653/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113009, "uuid": "d09dbc80-2548-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1proc.networkcontroller.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113308, "uuid": "82dd0a98-2549-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2power.networkcontroller.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113496, "uuid": "f3113657-2549-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.245.107.223:51228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113558, "uuid": "18196f7c-254a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.194.174:52033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113559, "uuid": "189d423c-254a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.160.23:45431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113609, "uuid": "363f3088-254a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc3local.networkcontroller.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113621, "uuid": "3dafa49c-254a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.249.24:52692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113862, "uuid": "cd486d4f-254a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:60299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774113966, "uuid": "0b1bff34-254b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4work.networkcontroller.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114025, "uuid": "2e990232-254b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.217.97:39653/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114061, "uuid": "43f1ad9b-254b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.60:59271/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114266, "uuid": "be112ec5-254b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv1infra.resourcevalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114336, "uuid": "e7bd0a56-254b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.201.44:51262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114514, "uuid": "517fe248-254c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:33800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114569, "uuid": "7280f1d9-254c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv2base.resourcevalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114651, "uuid": "a389246b-254c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.160:39860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114929, "uuid": "48f8fc08-254d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv3user.resourcevalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774114995, "uuid": "708e8d6a-254d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.160.23:45431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115116, "uuid": "b87e8890-254d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.249.24:52692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115167, "uuid": "d6ed4585-254d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:42284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115291, "uuid": "209d5d26-254e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.94.7:55597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115347, "uuid": "4221d7d2-254e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv4link.resourcevalidator.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115357, "uuid": "487aafe8-254e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.201.44:51262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115648, "uuid": "f569ab3b-254e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node1proc.databaseintegrity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115652, "uuid": "f85b7c1e-254e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.94.7:55597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115653, "uuid": "f89a5faf-254e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.191:55349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774115946, "uuid": "a728f2fe-254f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2core.databaseintegrity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116014, "uuid": "cfdcb41b-254f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.182.115/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116139, "uuid": "1a31943c-2550-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:46807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116307, "uuid": "7ea8df94-2550-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3ghost.databaseintegrity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116498, "uuid": "f06a568b-2550-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:42284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116609, "uuid": "327442f7-2551-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node4view.databaseintegrity.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116621, "uuid": "39656b74-2551-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.211.159:34526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774116978, "uuid": "0ea807e3-2552-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.37.45:55376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117026, "uuid": "2b268b5a-2552-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.194:49636/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117028, "uuid": "2bffd283-2552-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1proc.systemintegration.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117154, "uuid": "774523f0-2552-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:46807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117270, "uuid": "bc8ce054-2552-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2point.systemintegration.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117373, "uuid": "fa2ca346-2552-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.60:59271/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117578, "uuid": "7440955b-2553-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.66.188:46861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117626, "uuid": "9085bc17-2553-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc3view.systemintegration.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117885, "uuid": "2b4ab69c-2554-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.211.48:50358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774117986, "uuid": "66f98c39-2554-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4path.systemintegration.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774118226, "uuid": "f665fc18-2554-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.194:49636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774118286, "uuid": "19f31e29-2555-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv1proc.virtualenvironment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774118650, "uuid": "f34032b8-2555-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv2outer.virtualenvironment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774118891, "uuid": "82e7f88a-2556-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.66.188:46861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774118947, "uuid": "a3fabee3-2556-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv3field.virtualenvironment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119204, "uuid": "3d185992-2557-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.29:53429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119308, "uuid": "7af5ae64-2557-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv4space.virtualenvironment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119376, "uuid": "a405c4bf-2557-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:53383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119377, "uuid": "a43256c3-2557-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.127.137:53527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119425, "uuid": "c1114ecc-2557-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:54535/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119728, "uuid": "757bc74d-2558-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node1proc.remotemanagement.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119968, "uuid": "04c1a743-2559-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2steel.remotemanagement.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774119975, "uuid": "090ccd33-2559-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.211.48:50358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120026, "uuid": "274e0775-2559-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:49714/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120158, "uuid": "75a414b1-2559-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.160.8:42782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120517, "uuid": "4c011b91-255a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.157.253.209:45024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120566, "uuid": "690bb38e-255a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3core.remotemanagement.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120808, "uuid": "f9631012-255a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node4sat.remotemanagement.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120927, "uuid": "4057aab5-255b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.127.137:53527/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120931, "uuid": "42bb2a3e-255b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:53383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120932, "uuid": "4353b92a-255b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.59.29:53429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774120988, "uuid": "64bf0846-255b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc1infra.analyticspipeline.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774121348, "uuid": "3b6f8356-255c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc2proxy.analyticspipeline.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774121358, "uuid": "41017998-255c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.55.224:53844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774121709, "uuid": "1282dde7-255d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc3data.analyticspipeline.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774121776, "uuid": "3a832782-255d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.160.8:42782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774121903, "uuid": "85d89dc1-255d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.254.229:48910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122010, "uuid": "c5d5f671-255d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc4point.analyticspipeline.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122435, "uuid": "c2de6a70-255e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.191:55349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122618, "uuid": "3034f8e3-255f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.55.224:53844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122866, "uuid": "c3e616c1-255f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.120.123.166:8080/rev", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774122919, "uuid": "e393fa4a-255f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.167.182:49208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774123098, "uuid": "4dff83b5-2560-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.245.180:43935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774123272, "uuid": "b5d4fe10-2560-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.139.22:56638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774123576, "uuid": "6b569796-2561-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.254.229:48910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774124175, "uuid": "d0415748-2562-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.104.140:46504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774124294, "uuid": "17300199-2563-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.157.112:56872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774124352, "uuid": "39bc761d-2563-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.245.180:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774124526, "uuid": "a18fdc21-2563-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:47165/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774124601, "uuid": "cdf1f242-2563-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.34.118:58224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774124767, "uuid": "30d35b36-2564-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.43.126:41697/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774125009, "uuid": "c10bcbe0-2564-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.139.22:56638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774125425, "uuid": "b96f9abd-2565-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.38:38866/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774125622, "uuid": "2ecc9a32-2566-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.157.112:56872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774125799, "uuid": "984d5e3a-2566-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.34.118:58224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126026, "uuid": "1fbed0a8-2567-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:47165/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126027, "uuid": "201002ab-2567-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.112.204:55784/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126626, "uuid": "84e40c3b-2568-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.38:38866/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126703, "uuid": "b2dd8df7-2568-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.25.152:54286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774126822, "uuid": "fa2411b8-2568-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.89.169:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774127525, "uuid": "9d322914-256a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.43.126:41697/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774128072, "uuid": "e2df35ca-256b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub1sync.terminaldataprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774128247, "uuid": "4b1ada34-256c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub2data.terminaldataprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774128726, "uuid": "68df5af9-256d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.112.204:55784/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774128909, "uuid": "d5b191f7-256d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub4static.terminaldataprocessor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129027, "uuid": "1c1d7210-256e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.81.35:56490/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129028, "uuid": "1c941def-256e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.123.178:36486/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129208, "uuid": "8828557c-256e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.securityaccessgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129218, "uuid": "8e27d8d3-256e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.42:49988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129339, "uuid": "d61d0640-256e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.90.112:50623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129628, "uuid": "8236ecb2-256f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.securityaccessgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129637, "uuid": "87ad1b71-256f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.48.108:45098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129637, "uuid": "87dae971-256f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.97:59301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129764, "uuid": "d34686c1-256f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.204.71:37529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129868, "uuid": "115303e4-2570-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.securityaccessgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774129948, "uuid": "416e8235-2570-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.80.108:47249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130234, "uuid": "ebdaba96-2570-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.securityaccessgateway.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130534, "uuid": "9e2f3462-2571-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int1store.networkresourcebuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130655, "uuid": "e6944f5c-2571-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.16:50498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130655, "uuid": "e6a83818-2571-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.90.112:50623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130656, "uuid": "e73fd832-2571-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.165.57.48:39868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130827, "uuid": "4cdd2f88-2572-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.123.178:36486/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130836, "uuid": "52a75746-2572-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.165.57.48:39868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774130886, "uuid": "70692a65-2572-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int2remote.networkresourcebuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131126, "uuid": "ff68ba90-2572-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Marzit36/marzit36.github.io/raw/refs/heads/main/energy/github_marzit_io_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131126, "uuid": "ff6d6986-2572-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Marzit36/marzit36.github.io/refs/heads/main/energy/github_marzit_io_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131186, "uuid": "22f69497-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JJYT12/trying/refs/heads/main/blanda/Software-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131187, "uuid": "23e6f5b4-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JJYT12/trying/raw/refs/heads/main/blanda/Software-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131198, "uuid": "2a20579c-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.76.100:36888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131198, "uuid": "2a51f68d-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.24.99.3:46916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131248, "uuid": "47e326a1-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int3dev.networkresourcebuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131372, "uuid": "91da10d0-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.204.71:37529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131498, "uuid": "dcc5fd2e-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.81.121:37164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131499, "uuid": "dd76aeac-2573-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.80.108:47249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131608, "uuid": "1e98a044-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int4link.networkresourcebuffer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131669, "uuid": "42dbdd9b-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/msopu/mawari-node-setup/refs/heads/main/pygmyship/mawari-setup-node-3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131669, "uuid": "42dbe0cb-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/TeamDark07/PCH-PoP/refs/heads/main/examples/3_resource_contention/P-PC-Po-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131669, "uuid": "42dbe6e5-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JJYT12/jjyt12.github.io/refs/heads/main/overfreely/jjyt-github-io-3.9-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131669, "uuid": "4316fcda-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/TeamDark07/PCH-PoP/raw/refs/heads/main/examples/3_resource_contention/P-PC-Po-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131669, "uuid": "43414b44-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/TeamDark07/tracker/raw/refs/heads/main/risibility/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "43426cd6-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JJYT12/jjyt12.github.io/raw/refs/heads/main/overfreely/jjyt-github-io-3.9-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "4358ecfc-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Bri20-ctrl/laravel-starter-kit-inertia-react/raw/refs/heads/main/resources/js/pages/user-password-confirmation/laravel_react_starter_inertia_kit_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "43591223-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/msopu/mawari-node-setup/raw/refs/heads/main/pygmyship/mawari-setup-node-3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "4367f784-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Kaylynhusbandly717/cursor-2api/raw/refs/heads/main/app/core/api_cursor_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "43845854-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bri20-ctrl/laravel-starter-kit-inertia-react/refs/heads/main/resources/js/pages/user-password-confirmation/laravel_react_starter_inertia_kit_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "438c24e6-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/TeamDark07/tracker/refs/heads/main/risibility/Software_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131670, "uuid": "43ac34b9-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ZakwanShah16/LeetBuddy/refs/heads/main/backend/extension/routes/Buddy_Leet_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131671, "uuid": "440e6f81-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ZakwanShah16/LeetBuddy/raw/refs/heads/main/backend/extension/routes/Buddy_Leet_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131672, "uuid": "4476fafa-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Kaylynhusbandly717/cursor-2api/refs/heads/main/app/core/api_cursor_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774131850, "uuid": "af23cad2-2574-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.16:50498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774132210, "uuid": "8581bb8e-2575-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub2power.systemintegritynode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774132330, "uuid": "ccb9a5a7-2575-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.102.25.50:57308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774132568, "uuid": "5add0a1d-2576-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub3local.systemintegritynode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774132926, "uuid": "30164448-2577-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub4work.systemintegritynode.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774132943, "uuid": "3a411eff-2577-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.24.99.3:46916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133228, "uuid": "e43d25a4-2577-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.virtualinterfacenet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133587, "uuid": "ba20dfd5-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/giaaaa0121/Fourmeme-bot/refs/heads/main/src/lib/copy/bot_Fourmeme_v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133587, "uuid": "ba50a1e0-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/giaaaa0121/Fourmeme-bot/raw/refs/heads/main/src/lib/copy/bot_Fourmeme_v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133589, "uuid": "bb3bb202-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2base.virtualinterfacenet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133589, "uuid": "bb6999c9-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wordoffarewellothonna275/Anvil/raw/refs/heads/main/example/Software_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133589, "uuid": "bb954a60-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cracklingscapitalofsouthdakota649/gpu_benchmark/raw/refs/heads/main/supports/benchmark_gpu_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133590, "uuid": "bbf55b9e-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/cracklingscapitalofsouthdakota649/gpu_benchmark/refs/heads/main/supports/benchmark_gpu_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133591, "uuid": "bc990385-2578-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wordoffarewellothonna275/Anvil/refs/heads/main/example/Software_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774133887, "uuid": "6cc3471e-2579-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3user.virtualinterfacenet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774134193, "uuid": "233f040a-257a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:46476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774134308, "uuid": "67d937da-257a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4link.virtualinterfacenet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774134609, "uuid": "1b6acc55-257b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int1proc.globalmetricshandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774134908, "uuid": "cdd4baa2-257b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int2core.globalmetricshandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135267, "uuid": "a34f5f61-257c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int3ghost.globalmetricshandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135329, "uuid": "c892ed44-257c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/neo/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135388, "uuid": "eb7b69c7-257c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/test/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135514, "uuid": "36d32105-257d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:60166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135567, "uuid": "5626066d-257d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/final/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135626, "uuid": "79ca04d1-257d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/unique5/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135627, "uuid": "7a2a6852-257d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://int4view.globalmetricshandler.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774135987, "uuid": "50655d73-257e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub1proc.cloudoperationcenter.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136286, "uuid": "03135ccd-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub2point.cloudoperationcenter.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136407, "uuid": "4b070742-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/gop/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136407, "uuid": "4b11fef2-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7115306239/Qub5kf3.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136467, "uuid": "6e8e2496-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/8036065901/ggGms6j.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136525, "uuid": "918aa038-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/8499672124/b1JNsvy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136525, "uuid": "918ab627-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/8574065846/HPlEReH.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136526, "uuid": "91b2107b-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/5900855435/eNLe4nm.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136527, "uuid": "92482170-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/8434554557/X8cqVrA.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136527, "uuid": "929de563-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7850695435/gpaMBVQ.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136585, "uuid": "b556c7e2-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7341834371/BgAtGH0.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136591, "uuid": "b8e99055-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7782139129/S6xWuZ1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136602, "uuid": "bf468cea-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.49.218:54039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136646, "uuid": "d957ddb7-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/8531638373/QWFfVk7.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136646, "uuid": "d966945d-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub3view.cloudoperationcenter.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136646, "uuid": "d983e5fb-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/8717422379/VMa1dJb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136707, "uuid": "fe074364-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7782139129/1fz7hzL.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136708, "uuid": "fe434c36-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7453936223/KAQ8PQ5.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136708, "uuid": "fe466853-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7115306239/4VbzEBd.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136709, "uuid": "fee29659-257f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7782139129/ZSZfFtn.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136722, "uuid": "0689d853-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:53308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136765, "uuid": "2092f531-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/7776573655/KSsORhg.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136768, "uuid": "22630f4a-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:52360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774136895, "uuid": "6e29e89a-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.146:40587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774137007, "uuid": "b09daff7-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.252.21.239/files/rdx/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774137010, "uuid": "b2544de2-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub4path.cloudoperationcenter.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774137019, "uuid": "b7dabab1-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.192.235:34480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774137080, "uuid": "dc3f7cc2-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.207:53267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774137138, "uuid": "fec5de6b-2580-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.63.241:55413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774137247, "uuid": "3f8fb6e7-2581-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.remotediagnosticlink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774090324, "uuid": "ff2b3ad5-2513-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "0ak-plate.fileost.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774072385, "uuid": "3ac172f0-24ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.72.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083425, "uuid": "ef113c69-2503-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.73.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103225, "uuid": "0909fb9a-2532-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.77.34", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774054024, "uuid": "7b30180f-24bf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.106.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774094225, "uuid": "144c7a37-251d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.19.215", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774117864, "uuid": "1ebf8b73-2554-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.211.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774112825, "uuid": "62d0a4cc-2548-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.217.97", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111984, "uuid": "6dc2cefb-2546-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.194.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108865, "uuid": "2acf79d9-253f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.251.85.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774102024, "uuid": "3d2e08b8-252f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.12.255.0", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083905, "uuid": "0d92d68e-2505-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.57.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774098964, "uuid": "1d2a7268-2528-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.76.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774066985, "uuid": "a8258d2d-24dd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.225.35.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774124164, "uuid": "c9b6093f-2562-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.104.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774098424, "uuid": "db46a6bb-2526-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.223.191", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774095726, "uuid": "9309a3af-2520-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.245.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111444, "uuid": "2c0e6c89-2545-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.165.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774123085, "uuid": "464329c7-2560-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.245.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083007, "uuid": "f648560e-2502-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.251.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105024, "uuid": "390bc286-2536-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.81.35", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774098606, "uuid": "47f57767-2527-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.154.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107125, "uuid": "1d5774f8-253b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.13.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051864, "uuid": "7392e14a-24ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.79.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774124284, "uuid": "110e6629-2563-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.157.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060624, "uuid": "d900f372-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.201.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774057624, "uuid": "dc6fde36-24c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.243.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106106, "uuid": "be4adc25-2538-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.116.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774067944, "uuid": "e3b9f166-24df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.10.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774070647, "uuid": "2ef3fb02-24e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.18.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104724, "uuid": "86ba337c-2535-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774074007, "uuid": "0176bab9-24ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.17.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129925, "uuid": "33adc17a-2570-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.80.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774068124, "uuid": "4f72fd9e-24e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.187.183", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055224, "uuid": "464562f2-24c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.191.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061524, "uuid": "f16a4c66-24d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.140.96", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055584, "uuid": "1ccd268c-24c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.187.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129746, "uuid": "c87c4025-256f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.204.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774079044, "uuid": "bc37e747-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.54.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774119184, "uuid": "310dcae8-2557-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.59.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126685, "uuid": "a8004bab-2568-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.25.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774056424, "uuid": "116571ca-24c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.183.28", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104425, "uuid": "d406aa57-2534-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.184.48.189", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106944, "uuid": "b1d491f9-253a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.219.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774096624, "uuid": "aaab0d02-2522-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.65.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774091885, "uuid": "a19a3fc7-2517-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.245.98.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774113544, "uuid": "0f85b088-254a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.160.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774137124, "uuid": "f68dd637-2580-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.63.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061643, "uuid": "387924e2-24d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.240.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774124584, "uuid": "c40f1cb6-2563-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.34.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774090445, "uuid": "476804d4-2514-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.205.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111744, "uuid": "dec8ee3d-2545-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.223.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774076345, "uuid": "72feaf64-24f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.44.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774066025, "uuid": "6bcd88dd-24db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.137.93", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774092364, "uuid": "bf41f16e-2518-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.224.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774100706, "uuid": "2b60cc39-252c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.91.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082106, "uuid": "dce33ea6-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "174.138.43.79", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774073044, "uuid": "c3d95cf3-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.95.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774080425, "uuid": "f3234845-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.114.213", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774137006, "uuid": "affdea6a-2580-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.192.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774075324, "uuid": "12c66645-24f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.85.206", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107125, "uuid": "1d576a87-253b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.215.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129025, "uuid": "1af06f7b-256e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.123.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774121885, "uuid": "7af1cbd6-255d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.254.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774078506, "uuid": "7b510644-24f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.64.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126024, "uuid": "1e83f78b-2567-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.112.204", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774067224, "uuid": "36e4bb79-24de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.212.176", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774066624, "uuid": "d0d79d43-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.103.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774072925, "uuid": "7caec92d-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.46.19.104", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774116006, "uuid": "cae96cd9-254f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.182.115", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774131184, "uuid": "22127a26-2573-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.24.99.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051444, "uuid": "7909aa28-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.36.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062725, "uuid": "bd093aba-24d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.29.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774116964, "uuid": "0644d09a-2552-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.37.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774076824, "uuid": "90a31773-24f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.0.102.113", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108925, "uuid": "4e444ec4-253f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.149.244", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064885, "uuid": "c4d62c98-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.88.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774115285, "uuid": "1d0b55d9-254e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.94.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774110845, "uuid": "c6ba4c51-2543-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.200.217.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060564, "uuid": "b4d809b6-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.147.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774121344, "uuid": "38c70d14-255c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.55.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107545, "uuid": "17d677f3-253c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.94.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774120144, "uuid": "6dce39f8-2559-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.160.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774069325, "uuid": "1ac8f442-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.196.214", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774124764, "uuid": "2f85c8ce-2564-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.43.126", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774086124, "uuid": "383bc3c7-250a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.82.221", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774068544, "uuid": "49685f63-24e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.153.152.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103585, "uuid": "dfd03e7d-2532-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.194.147.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083725, "uuid": "a1f07800-2504-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.246.1", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774115645, "uuid": "f3f1e780-254e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.178.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108025, "uuid": "362b29c6-253d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.178.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129625, "uuid": "807b0c7a-256f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.178.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051444, "uuid": "79098a60-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.119.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774126806, "uuid": "f02e67e7-2568-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.89.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060924, "uuid": "8b7fec7a-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.102.2", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774130651, "uuid": "e405bfa0-2571-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.165.57.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774075084, "uuid": "83edc1f7-24f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.124.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774136584, "uuid": "b4698b95-257f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.49.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774093206, "uuid": "b5150f69-251a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.91.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088225, "uuid": "1c1c7fc5-250f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.229.198", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774099985, "uuid": "7db18aa4-252a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.52.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774117565, "uuid": "6c672a3b-2553-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.66.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774122906, "uuid": "db94d5dd-255f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.167.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774079405, "uuid": "935325db-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.126.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774093924, "uuid": "616e6e2b-251c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.48.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774086545, "uuid": "32ea9f0e-250b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.252.155.246", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774135325, "uuid": "c5db1606-257c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.252.21.239", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774098725, "uuid": "8ec1b285-2527-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.42.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089724, "uuid": "9a07426b-2512-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.102.170", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774075624, "uuid": "c5ab06e4-24f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.66.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774066624, "uuid": "d0d74622-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.67.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774131184, "uuid": "221256ee-2573-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.76.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774100884, "uuid": "95e890a8-252c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.14.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088344, "uuid": "63507c52-250f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.246.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774075563, "uuid": "a1359d84-24f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.167.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774084565, "uuid": "969107ff-2506-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.182.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107906, "uuid": "ef6290a2-253c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5p4r-node.grovopen.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774097824, "uuid": "75fd529e-2525-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.11.29", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774123263, "uuid": "b0d9f745-2560-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.139.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774098906, "uuid": "faa51793-2527-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "677jb7co.goldsys.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774122844, "uuid": "b7202e81-255f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.120.123.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774065724, "uuid": "b8a5bdb0-24da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.45.186.63", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774052525, "uuid": "fdbedba2-24bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.60.49.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082106, "uuid": "dd0c19b1-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.214.20.143", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105924, "uuid": "51d80656-2538-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "9uhve7s.deepglom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107185, "uuid": "4149b120-253b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "abhd27da.grovopen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108206, "uuid": "a1e60ef2-253d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bhkpzpne.grovopen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087625, "uuid": "b66f4957-250d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "by42.officeco.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774078924, "uuid": "746bbf54-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "byte-ster.tatneft.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064945, "uuid": "e8579036-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg1proc.interfacehandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774069325, "uuid": "1adabd24-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg1proc.networkoptimizer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060864, "uuid": "6802141c-24cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg1store.resourcebalancer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774065244, "uuid": "9a7cd90c-24d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg2core.interfacehandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061224, "uuid": "3e98c9dd-24d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg2remote.resourcebalancer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774069567, "uuid": "ab2cf5a6-24e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg2steel.networkoptimizer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774069745, "uuid": "1517014f-24e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg3core.networkoptimizer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061584, "uuid": "14ea4a71-24d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg3dev.resourcebalancer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774061884, "uuid": "c7ec3754-24d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg4link.resourcebalancer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774070107, "uuid": "ed685a45-24e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg4sat.networkoptimizer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774065905, "uuid": "24572a08-24db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cfg4view.interfacehandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088767, "uuid": "5f93562a-2510-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1nic3-point.officeco.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774093445, "uuid": "4394719e-251b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "compr-hinge.getverif.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774084327, "uuid": "08ce85c8-2506-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "convertdri.bravevro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083007, "uuid": "f6558410-2502-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpz2.way2dot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774086786, "uuid": "c2ab1566-250b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "discovership.worldcla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774133226, "uuid": "e333d550-2577-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.virtualinterfacenet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129206, "uuid": "86f7a7d6-256e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.securityaccessgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774053065, "uuid": "3f0c5b60-24bd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.coreconnectivity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774137244, "uuid": "3e34f2bd-2581-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.remotediagnosticlink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774133586, "uuid": "b97c973d-2578-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2base.virtualinterfacenet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774053366, "uuid": "f2e73d16-24bd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2outer.coreconnectivity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129625, "uuid": "80836bbc-256f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.securityaccessgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774053727, "uuid": "c9adc19c-24be-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3field.coreconnectivity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774129865, "uuid": "0ff4f05b-2570-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.securityaccessgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774133885, "uuid": "6bdccb11-2579-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3user.virtualinterfacenet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774134305, "uuid": "664153dc-257a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4link.virtualinterfacenet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774054085, "uuid": "9f2ecbbf-24bf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4space.coreconnectivity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774130225, "uuid": "e6237cd3-2570-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.securityaccessgateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774081564, "uuid": "9a49af5a-24ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f1am3-sheet.way2dot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082106, "uuid": "dd104e97-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-herunterladen.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774085166, "uuid": "fd3914c5-2507-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "firmwarevale.bravevro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774093864, "uuid": "3da48524-251c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "forgeledg.clocknet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104544, "uuid": "1b7db32a-2535-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "formaass.sleepbut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774079764, "uuid": "697682ee-24fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshbuil.protdast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774085525, "uuid": "d2c14714-2508-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gfdrj.bravevro.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774081984, "uuid": "94829935-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr4n-spool.way2dot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774091105, "uuid": "d108c0f6-2515-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gwqs23ca.temprock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774102264, "uuid": "cc58d8ea-252f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "horbusten.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774135984, "uuid": "4f0e1a8c-257e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub1proc.cloudoperationcenter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774128065, "uuid": "dedb8030-256b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub1sync.terminaldataprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774128245, "uuid": "4a25c0d0-256c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub2data.terminaldataprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774136284, "uuid": "01974b44-257f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub2point.cloudoperationcenter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774132208, "uuid": "843cb0a1-2575-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub2power.systemintegritynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774132564, "uuid": "588b89bc-2576-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub3local.systemintegritynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774136644, "uuid": "d8401222-257f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub3view.cloudoperationcenter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774137008, "uuid": "b1377454-2580-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub4path.cloudoperationcenter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774128906, "uuid": "d40dd2c1-256d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub4static.terminaldataprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774132924, "uuid": "2f240d68-2577-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub4work.systemintegritynode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774091584, "uuid": "ee53d2df-2516-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ijl3voy.temprock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774134607, "uuid": "1a32e165-257b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int1proc.globalmetricshandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774054445, "uuid": "75c09dc3-24c0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int1proc.systemicvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774130530, "uuid": "9c3e000d-2571-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int1store.networkresourcebuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774134906, "uuid": "cc52a610-257b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int2core.globalmetricshandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774130885, "uuid": "6f8444b1-2572-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int2remote.networkresourcebuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774054745, "uuid": "28650b4e-24c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int2steel.systemicvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055045, "uuid": "db58342e-24c1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int3core.systemicvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774131244, "uuid": "45ad7f77-2573-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int3dev.networkresourcebuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774135264, "uuid": "a1fdd1ce-257c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int3ghost.globalmetricshandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774131606, "uuid": "1d69a183-2574-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int4link.networkresourcebuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055405, "uuid": "b1dcc7e2-24c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int4sat.systemicvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774135625, "uuid": "79191d5d-257d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int4view.globalmetricshandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051384, "uuid": "55823057-24b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "int4view.virtualgatekeeper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774092725, "uuid": "96627b63-2519-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelvenum.getverif.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774102989, "uuid": "7c6bcaa3-2531-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "labquick.hugeflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774080785, "uuid": "c97ac85a-24fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "laneserv.protdast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088284, "uuid": "3fc4555f-250f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "layer-graph.officeco.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774120986, "uuid": "63289554-255b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1infra.analyticspipeline.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774113005, "uuid": "ce36482a-2548-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1proc.networkcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774117024, "uuid": "29be174e-2552-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1proc.systemintegration.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108865, "uuid": "2adba34c-253f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc1sync.streamdatahandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774109284, "uuid": "24ad4160-2540-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2data.streamdatahandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774117268, "uuid": "bb6015eb-2552-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2point.systemintegration.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774113306, "uuid": "81e9d86b-2549-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2power.networkcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774121344, "uuid": "38d5c502-255c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc2proxy.analyticspipeline.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774121706, "uuid": "1076c5fc-255d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc3data.analyticspipeline.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774109585, "uuid": "d7952785-2540-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc3edge.streamdatahandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774113544, "uuid": "0f9afabc-254a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc3local.networkcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774117624, "uuid": "8fade058-2553-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc3view.systemintegration.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774117984, "uuid": "66262875-2554-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4path.systemintegration.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774122008, "uuid": "c46259a2-255d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4point.analyticspipeline.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774109948, "uuid": "b06ea547-2541-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4static.streamdatahandler.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774113964, "uuid": "09fe297e-254b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc4work.networkcontroller.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774099085, "uuid": "6571f8a7-2528-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mingloria.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774070406, "uuid": "9f3579f7-24e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk1infra.datacenterstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062184, "uuid": "7ad1b594-24d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk1proc.endpointvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774066324, "uuid": "1e3b29e0-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk1proc.gatewayprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774057984, "uuid": "b34bcb4b-24c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk1sync.distributedledger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774058584, "uuid": "191fe9e7-24ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk2data.distributedledger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774066568, "uuid": "afe89840-24dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk2point.gatewayprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062606, "uuid": "7600baa7-24d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk2power.endpointvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774070765, "uuid": "7557d1ae-24e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk2proxy.datacenterstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774071125, "uuid": "4bd6a9c8-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk3data.datacenterstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774058825, "uuid": "a88ab3fc-24ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk3edge.distributedledger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774062906, "uuid": "2900cbdc-24d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk3local.endpointvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774067644, "uuid": "315089da-24df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk4path.gatewayprocessor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774071366, "uuid": "dbb11feb-24e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk4point.datacenterstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774059245, "uuid": "a2e99847-24cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk4static.distributedledger.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774063265, "uuid": "fed1d8f9-24d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "msk4work.endpointvalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083007, "uuid": "f659b0ee-2502-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "needlegene.respecti.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774115645, "uuid": "f3fcd0ce-254e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node1proc.databaseintegrity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774119726, "uuid": "74929790-2558-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node1proc.remotemanagement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111624, "uuid": "97286542-2545-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node1store.securityframework.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774115944, "uuid": "a63ddcdd-254f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2core.databaseintegrity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111923, "uuid": "49a6e631-2546-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2remote.securityframework.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774119966, "uuid": "03b4329c-2559-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2steel.remotemanagement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774120565, "uuid": "683021e8-255a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3core.remotemanagement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774112223, "uuid": "fc54176e-2546-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3dev.securityframework.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774116306, "uuid": "7d9e568b-2550-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3ghost.databaseintegrity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774112586, "uuid": "d4544bba-2547-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node4link.securityframework.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774120806, "uuid": "f7ed0102-255a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node4sat.remotemanagement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774116605, "uuid": "302fdc2e-2551-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node4view.databaseintegrity.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774072264, "uuid": "f2c68714-24e9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "our.datacenterstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774079405, "uuid": "935be82a-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p01nt.logicflowmanager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774099025, "uuid": "4184a4b0-2528-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p2pdany.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089605, "uuid": "52d4a9d9-2512-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4st-logic.fileost.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774108566, "uuid": "78563d83-253e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "partne2-field.grovopen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774079165, "uuid": "041db2b9-24fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc.networkoptimizer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089125, "uuid": "3497926d-2511-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu3ry-glow.fileost.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088465, "uuid": "ab1bf1d7-250f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickstep.fluxobase.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103765, "uuid": "4af8035f-2533-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorcoreet.sleepbut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774080245, "uuid": "87eb0f76-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quot-hidd.protdast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774080064, "uuid": "1c39fabd-24fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rela-labe.protdast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774089965, "uuid": "29395359-2513-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reportobserve.fileost.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774088344, "uuid": "637554f5-250f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "repost.punto-viva.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774103344, "uuid": "5019bb18-2532-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "riv3r-sheet.sleepbut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774063565, "uuid": "b1adcde9-24d5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt1infra.protocolanalyzer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774059544, "uuid": "55565224-24cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt1meta.integritychecker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774067884, "uuid": "c0503d3d-24df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt1proc.terminalobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774063926, "uuid": "8912ec23-24d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt2base.protocolanalyzer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774068364, "uuid": "de110ba8-24e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt2outer.terminalobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774059905, "uuid": "2c6e5cfc-24cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt2proc.integritychecker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774068544, "uuid": "4973e6bc-24e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt3field.terminalobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060207, "uuid": "e01afaad-24cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt3gate.integritychecker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064224, "uuid": "3adf72d4-24d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt3user.protocolanalyzer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774064584, "uuid": "11366ca9-24d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt4link.protocolanalyzer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774068725, "uuid": "b52de1f0-24e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt4space.terminalobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774060564, "uuid": "b4e85058-24ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rt4sync.integritychecker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774092364, "uuid": "bf4caaf4-2518-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "runwa1-path.getverif.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083606, "uuid": "5b29932b-2504-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "secureswift.respecti.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774091944, "uuid": "c4bd9ff8-2517-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shad-wave.temprock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105505, "uuid": "5806c312-2537-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "silenparser.deepglom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083965, "uuid": "30f89ef4-2505-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sollithal.respecti.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106825, "uuid": "6ab442af-253a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "spectrumdaemon.deepglom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774114264, "uuid": "bcfc845c-254b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv1infra.resourcevalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774110245, "uuid": "614262be-2542-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv1meta.cloudinfrastructure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774118284, "uuid": "18e36d0f-2555-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv1proc.virtualenvironment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774114567, "uuid": "7156194d-254c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv2base.resourcevalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774118646, "uuid": "f0c3d472-2555-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv2outer.virtualenvironment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774118944, "uuid": "a28a7f0f-2556-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv3field.virtualenvironment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774110906, "uuid": "eb3ec7bc-2543-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv3gate.cloudinfrastructure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774114926, "uuid": "479248e5-254d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv3user.resourcevalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774115345, "uuid": "40e5750a-254e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv4link.resourcevalidator.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774119305, "uuid": "79b97798-2557-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv4space.virtualenvironment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774111265, "uuid": "c1150729-2544-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv4sync.cloudinfrastructure.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774104125, "uuid": "21539c2d-2534-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "str3-scope.sleepbut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774105264, "uuid": "c85da7c3-2536-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sxiy.deepglom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082106, "uuid": "dd163018-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "thairefaruq.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774086366, "uuid": "c814b95e-250a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trail1-grid.worldcla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087444, "uuid": "4b04309d-250d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trivaleum7.worldcla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087984, "uuid": "8ce636c4-250e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ts9qv.officeco.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774073644, "uuid": "297f404c-24ed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uf0t.scrollnft.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774083125, "uuid": "3c6ea5c6-2503-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "umhbryzn.respecti.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774093144, "uuid": "90700d64-251a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unl25bit.getverif.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774082106, "uuid": "dcf427c2-2500-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unwitting.fluxobase.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774073345, "uuid": "77233256-24ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "validat-gri.tatneft.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774055765, "uuid": "88cb4f01-24c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld1infra.logicflowmanager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774051686, "uuid": "094c9b06-24ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld1proc.dynamictelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774052045, "uuid": "df1451bb-24ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld2point.dynamictelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774056064, "uuid": "3af078f8-24c4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld2proxy.logicflowmanager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774056424, "uuid": "117005ad-24c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld3data.logicflowmanager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774052406, "uuid": "b65eded5-24bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld3view.dynamictelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774052706, "uuid": "698266c4-24bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld4path.dynamictelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774056784, "uuid": "e838a841-24c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vld4point.logicflowmanager.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774072624, "uuid": "c94989e3-24ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "web3.terminalobserver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774078745, "uuid": "09b5b851-24f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xgj9.fotestat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774085945, "uuid": "cd105607-2509-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xmr14.worldcla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774081265, "uuid": "e79c8407-24fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xpj5ocpo.way2dot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774106648, "uuid": "012dad0d-253a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xpm713mg.deepglom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774090744, "uuid": "f9ee7e42-2514-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xxkvm5.temprock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774072984, "uuid": "a008b898-24eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ytp1swow.fotestat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774107609, "uuid": "3dd4ce7a-253c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "z5odl9.grovopen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774087385, "uuid": "27b95474-250d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeftasarim.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774084806, "uuid": "269a42f8-2507-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-lineis.bravevro.in.net" } ] } }