{ "Event": { "published": true, "date": "2026-02-24", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-24", "timestamp": 1771978522, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "3e57bb56-2216-4c3d-8ce5-af79db85b9d1", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771892650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892650, "uuid": "51412bd2-f167-4020-a4f6-0c4a6f87ff98", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892650, "uuid": "0286fb0b-22e1-49eb-92d9-6fa3dadb3063", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771892650, "uuid": "28203e23-3773-4b1e-b823-1d91878b89e8", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771892650, "uuid": "13aa1009-2a2d-4004-8d69-cca7b28e21aa", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771892650, "uuid": "bd5fbe92-24c0-40a6-9af7-37ae066b940c", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d59da78-111a-11f1-8369-82aee05be84a", "comment": "Malware payload (DonutLoader)", "timestamp": 1771894089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894089, "uuid": "e357952f-34dd-4c09-a314-f040a8919d79", "comment": "Malware payload (DonutLoader)", "value": "21a74e3c98906689f6d54d3eb72ec9f8", "object_relation": "md5", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894089, "uuid": "1f316312-0a17-4630-9dba-866ca6ac4fdd", "comment": "Malware payload (DonutLoader)", "value": "e7acc171f303d8c399f7e01f0091fe0e6253b8f81c6e444ec644d57463462f9d", "object_relation": "sha256", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771894089, "uuid": "c1338e88-f1b6-4bf5-a813-a1bac8935951", "value": "T18E36EABB8E384C89C6D7F1F69381D6700DE6AE67A4E6E0FA51D209401F437106F61E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771894089, "uuid": "4ab8f3d4-0df1-46cc-af67-8bcfd2f5d882", "value": "d512f74fd5e290f01bfc48029b75487a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771894089, "uuid": "e47174d0-fa58-489b-9fbf-47c41b9ea334", "value": "49152:hmoqRlHGwfbwbE9ofqNPLgo2wV3eo8xw:IQvwV/8xw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771894089, "uuid": "c9bc9f6a-70d6-470a-8e2a-37db2f47ed14", "value": 5120512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771894089, "uuid": "f9d95768-ede3-4143-960e-0ed505e5bb16", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f347de54-111c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771895146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895146, "uuid": "14f13771-38b5-4303-b946-7f4ca388ea6b", "comment": "Malware payload (Mirai)", "value": "d677376267131798e6cc75e7528a4d56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895146, "uuid": "42ddf1d1-0795-42c1-b64c-d45ff9fe08ec", "comment": "Malware payload (Mirai)", "value": "a3a4aa9462899732b39c63db82ac0c5ec6d533694b9d2e89d58b142ae70f3cba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895146, "uuid": "0597b2fc-e060-47c0-9c44-56b6e5062c12", "value": "T1DAB38DDBF7472490D8624AF007C71B9E2E633211CE5BE4E3AC1D3A3A597A1DB190A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895146, "uuid": "0a3f3772-b810-4ab9-bb68-267b0383c2c5", "value": "1536:6tjltgCnaPnQ5iliLcK0/9nmUhlYL6NPGgkhyV//LWl:MPgCniliof1mUhW6NPGgRV/q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895146, "uuid": "083d9fdf-0e52-44c0-be01-8853e46794b6", "value": 116340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895146, "uuid": "8d2a3df3-dd65-4c9c-8d6d-3e363cbccb41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "251e9127-111d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771895229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895229, "uuid": "75b2f9ec-0327-4c79-8252-ba3b5e45a175", "comment": "Malware payload (Mirai)", "value": "0bf034b0137beafe42fbb01b54558c9e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895229, "uuid": "7783b3b5-4759-4683-a4b3-f0219e03c5e7", "comment": "Malware payload (Mirai)", "value": "fb5ca26f94c2913ea19108415cd528630d14f501d1bf46155a3b303cdc7a0cc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895229, "uuid": "e0d3c3df-c77f-4ed3-9e05-3ee79dfb9dd0", "value": "T14D934A22BA750E27C4C0A4B621F74725F6F24BDA26A8891B7D720D8DBF216403557F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895229, "uuid": "2389d7a4-266d-4a3d-be4c-88baa800ff4a", "value": "1536:WYScMKVrZEAVWvYvrijndbHVSuuOvZ9BdHAtVd6N+S5ardZ1QxuTtOF9N:W9pKVVpWlrZxLzAX8NVarJ8nN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895229, "uuid": "84c0573d-9dff-4b1e-90ca-cd9d2088565f", "value": 97552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895229, "uuid": "b7cef291-286b-4608-bece-5f093e6d84cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771895470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895470, "uuid": "bbc98d72-1731-4bda-b0ee-c60a1ee5302b", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895470, "uuid": "a72009c8-bead-460f-bacb-6332c7da2afd", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895470, "uuid": "479331af-9723-4e24-a3f4-816a5dcf0690", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895470, "uuid": "5b4a297c-9ad0-44c4-92e0-e7002bdf7f62", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895470, "uuid": "86ce59f6-7d20-4c77-b660-fc8f6588c55d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5061dd3-111d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771895498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895498, "uuid": "7bfe2f08-dbf8-4cb2-9e1c-dc7fe1758660", "comment": "Malware payload (Mirai)", "value": "673c2e437f70aa53ed3718b7973e6ad4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895498, "uuid": "cb866159-daf6-4396-bf34-135c2e3ba6f9", "comment": "Malware payload (Mirai)", "value": "f6821e8dd7646432c45181efeca34f118a7a3fcfb4a258f43ba6bb227731248d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895498, "uuid": "a1a1158e-1a4a-4804-af65-eb7d53092830", "value": "T1E7736D52B70C0A47E4531EF02A3F53E2C3AA66E120E8F684750EDF49D6B5E325546E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895498, "uuid": "6b7c11d8-6451-46e0-9914-433dbad47e87", "value": "1536:R0TlIx8MunD7YKa/Wymt8z3PsoLWMypIL7jwDbur09MdAypwEQ:cKNKaFmt8rkEL7AurIM9Wl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895498, "uuid": "2e630244-d899-402e-9d97-9da345c1b480", "value": 79608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895498, "uuid": "72b127fa-317a-4abc-aac4-4876b3555ee3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d144459c-111d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771895518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895518, "uuid": "1ccaaf73-1b2e-463f-8d3f-1912084c26af", "comment": "Malware payload", "value": "f9c3178172ed5c68fa299f52f4a63df4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895518, "uuid": "4402a82d-eacf-4b1f-852e-6b0624d0e79d", "comment": "Malware payload", "value": "0e231ecf4c1770ae55cdc74dd7ede3ebd7a581538c4df6df99606b5a8187d6f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895518, "uuid": "4c12a8ba-e9ad-4ca5-aeb3-5cda4b728518", "value": "T1B734F03A3D15D38C0FD3C1A64AC39CA2A2036B4C8755F382458B65D1BF55ACB9B84E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895518, "uuid": "cc2680bc-021e-4df5-a29d-f4cee011c843", "value": "6144:mqHPmfCP5/4avT0z0NKVaedjr9yCdCHnHQUx8wIvrjN:myPMqSab0z0NKVrpr910zxI1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895518, "uuid": "c01aea8d-caf6-409e-9716-8cd5262fbc4f", "value": 247899, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895518, "uuid": "a81da8d4-da9c-4c74-b32b-21dea7c49f2e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1bff0e8-111d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771895573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895573, "uuid": "cd093bfb-1efe-4c46-84f7-ba6fd429f77b", "comment": "Malware payload (Mirai)", "value": "5abcedbe42759b483ba3f521d4694065", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895573, "uuid": "37a3690d-b49b-43b0-bc9c-739d1a8deadc", "comment": "Malware payload (Mirai)", "value": "e0b0b3f575296f2c5a224b94ac783ed88f47284f3ba47896ff4f2ec91043b495", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895573, "uuid": "23c69e27-29bd-4bf1-9e1b-7712a366337d", "value": "T10B13F1B2D0035690EBFB56784D958FE433984AE933314F61F54B2BE7493B4099AB05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895573, "uuid": "c8510524-adc0-4fa6-bb9c-4e40397af3f3", "value": "768:DKj83tm3kIVLmpIe+ezZ70x6PFwIu32W5K9Kw5WP7mqINBTdPSqN42g1KFcgv4ui:DKutCL0L+ezuxYFgMEcWP7d2SqS2uKFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895573, "uuid": "7bde2c93-a01f-464c-b10e-50cebc07932a", "value": 42472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895573, "uuid": "c37cd22e-9438-41d7-97e4-148ff5eda14a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70e0cc93-111e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771895786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895786, "uuid": "aa66f29b-e599-4efd-97cb-b7327b045ae2", "comment": "Malware payload (Mirai)", "value": "2c5adc5354a324a65538ca4432d9d577", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895786, "uuid": "22654f37-1d8b-4bd2-89d5-563e79f5f168", "comment": "Malware payload (Mirai)", "value": "96708ef718c649c9b480b176ae23f95624bb4d91d3894ff57653c44293e3c027", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895786, "uuid": "62b05cb2-5ff2-439f-9029-f7771d5ff74a", "value": "T1F0636DC2AA43D4F4EC1B05712177FB3646B3E17E1019EB4AC769E935FD12A41A22A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895786, "uuid": "0d0bd595-98b9-4e80-865d-9c4524193edc", "value": "1536:URxPcFA5RHY634TDDDZ+xgy4lDzxheLB0e0m76Y:UH0is6ofPUH41xhIqeWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771895786, "uuid": "7c72794f-60f4-4bf2-87d7-a81c72380e30", "value": 71152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895786, "uuid": "75276228-6971-4f98-97e0-68e8ad39fea3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07a4e28-111e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896000, "uuid": "e94ef875-ec0d-4ce4-98fb-cf15b69b14fd", "comment": "Malware payload (Mirai)", "value": "faf7f07cdda532e6f18d77a4561201d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896000, "uuid": "57a96e3e-a66c-473d-a4ee-b3ed7c7aea4c", "comment": "Malware payload (Mirai)", "value": "7fb946aa4bd18ffbdec532cf9ac388b28cf3c42aaf6e7f596baa65e262e56ff0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896000, "uuid": "d7899a37-0299-474c-a8aa-0fb8e9cc9943", "value": "T18C7317C1BA4B80F5D81748709167F33FCB72E6398065C75EEF6AAF25DE3364252162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896000, "uuid": "8f734df4-2912-458e-aea4-6958de088218", "value": "1536:Afyae04BMPIN2K8gJWXMhdnogK6hYikUyWb85neJIo0dyeQn:4XCdLK6hiA45neJI91Qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896000, "uuid": "d9503881-6094-471c-97b3-bb9dbd481b56", "value": 75248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896000, "uuid": "ae641602-8f11-4954-9368-fc69e104b3e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "188b7831-111f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896067, "uuid": "de4e76b9-b848-42d8-8e19-766dcb145476", "comment": "Malware payload (Mirai)", "value": "f945dd0f319794aa7e26a73d404d66c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896067, "uuid": "8db51163-79f6-4d12-972e-ed18526d45c6", "comment": "Malware payload (Mirai)", "value": "0a9869778c7a588ee09bbd790aea05fb684a2c064fa102605ec446b4ac315b9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896067, "uuid": "2eb62015-a953-4aac-94f9-182667a2bff5", "value": "T1AA735C02B70C0E87D1635EF02A3F23D2D3EEA6E121F4F684651E9A46D1B5E361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896067, "uuid": "8a3701ab-6d4e-4041-9c30-54534b89bb16", "value": "1536:PMzcNC+TcOrhsanbLhtGjUqR+Z9qXuVm7HWCa4UNW7:04jTTLEUqR6672COW7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896067, "uuid": "434ab12f-c50f-4b3b-91da-94a07a82ae43", "value": 79608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896067, "uuid": "13ccb71b-805d-46f7-b7b7-d1e651e539c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28769d40-111f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896094, "uuid": "bf3712cc-5bda-40b1-97e5-857ad71d03e8", "comment": "Malware payload (Mirai)", "value": "57ab93a7a0c3c982e04b59fdec7f344e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896094, "uuid": "186f86ff-d45f-4ebb-b7f6-4f19d4c3613d", "comment": "Malware payload (Mirai)", "value": "6a013e9b052b12fc85ff93fbdd47a80afdb4f4bb9241fbdcd506b565f1b4a74d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896094, "uuid": "d8763d4b-4665-4de2-b0b0-b565c7016a26", "value": "T1EC735A17758084FCC489C17097AFA23AD973B07D0279B19AA7D4FE22BE8EE501F2D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896094, "uuid": "db0bbca3-f816-4e32-b7da-d308f56cdef4", "value": "1536:GybnLlE+jvJfD68Ttv2AofeBjSIjZtMuG1NMeyXUb/pL64PXMc:dbtjBRTteAofe4IjH1G1NMeyWpL64Ec", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896094, "uuid": "b89cc3a3-1af3-47dc-a298-96cd4670ced7", "value": 77024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896094, "uuid": "142b7b12-31c2-4e1a-a09f-87e1c2026190", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fe6e538-111f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896133, "uuid": "2c3aded8-e5b0-4e5a-b72d-d3bcd1fcb881", "comment": "Malware payload (Mirai)", "value": "8f57e414593257fedabd8a54b3c252a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896133, "uuid": "997688c9-1cc9-4476-9e0c-b8db7d33bca7", "comment": "Malware payload (Mirai)", "value": "39af2f3f82efd7ba9d60eb78e2120c9f8c3a1b0b725e99a64a61b6260ce1296b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896133, "uuid": "e0eca0d7-810c-46c0-87e5-ed8ec1aba3b9", "value": "T114733A96FD814653CAD112B7FB6F428E372623A8E2DE3203DD155F11338692B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896133, "uuid": "705a20e0-d98f-4a6f-9eef-b2dd5b34d55b", "value": "1536:UQp1TiK90wC2BF7HxYoK2L9+v94uFDbirgSAV/RJmu:UQzTiK9pVGoK0ovxFDesS4/Su", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896133, "uuid": "52a4c967-8fa6-4cd5-951f-1beb3268467a", "value": 77376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896133, "uuid": "f3429081-f01a-4e25-b387-df3a887c0ddc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ff0c7a8-111f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771896133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896133, "uuid": "fb19f0bc-0a5e-4aaf-85d1-418e11e5b9af", "comment": "Malware payload", "value": "a57315b3baf53093e9c6bece0ba66854", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896133, "uuid": "f371ebad-be18-4560-8cf9-f0f4e6af80e5", "comment": "Malware payload", "value": "e91fc65960a88001daa42b0dc3455a1f814536fa16da12c759d873709485c1c5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896133, "uuid": "864f353a-0fee-471d-a385-3e1e4b83bfad", "value": "T10534F15CD628C4CFD4FC86CAB3FE716F1E26E95E54BAE3B501A0134B482DCD4994A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896133, "uuid": "77e9e08a-d95f-4769-805e-da6d5bb87ba3", "value": "6144:GWGZQIPkfrVrwJ9pBd8hxFof4NAgA8zVxL30bgv1SXdClGrYn:GAIPK6J9X4xFVNAgt7GrYn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896133, "uuid": "e5c0b6b1-0a12-422f-82f7-3ef192cf71ac", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896133, "uuid": "48c55e9e-0859-4c44-9bf3-afce5d56b551", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bc4fdf0-10fc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896229, "uuid": "c024e0bc-904f-4261-920b-e93e963c7a06", "comment": "Malware payload (Mirai)", "value": "6d0940f587cb24fb640e2c3ac9f6cbc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896229, "uuid": "468f9f99-7e95-4266-8544-df4834e7cae9", "comment": "Malware payload (Mirai)", "value": "324247d316dca4056e3eebb1095d3b84ad8af6676966a217385b05d56ac417e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896229, "uuid": "7d797cbf-1466-42bd-876d-3526ab0cafc7", "value": "T11A333B96F8A2596AC6D042BA772E968B335763B5C2CF7313C84C0B51768AB0F0D77D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896229, "uuid": "38f01cc2-5dc6-4af5-a65f-1ee06086db97", "value": "768:kw9Q7e/K9+cp2GLQo/C0JXxt7qihVrH7A4blnML2F+n95zz:bAe/K9aG8gJhtWiXrH7N0TV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896229, "uuid": "84e5295f-27ef-4d79-9a71-ba3123b21c74", "value": 51048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896229, "uuid": "c7de4dfa-079c-46a6-91e0-786ac0e27726", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c35409f-111f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896261, "uuid": "eca752c7-56a2-4930-966c-f0d8cd823087", "comment": "Malware payload (Mirai)", "value": "3f852f794ca7479bbfd1d2783ed2592f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896261, "uuid": "709fcdaa-8e57-4042-8d01-3f9ed12529c2", "comment": "Malware payload (Mirai)", "value": "025b291ae86bc5867928a71e1ec2043d308248bccca75283524d55ccd51db63b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896261, "uuid": "c50dc7ae-e6e6-48cd-bb35-869cf1a80757", "value": "T16463AD23C9265DA8E44954F071A08F7493A3E919D0AB6FFB056AC679C043EDCF90A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896261, "uuid": "66754f48-45b2-4c99-a805-479fb6df6369", "value": "1536:Sm2lxWrjSEOp2xSH9fDIo0sKW4sDW3p1eCe1QQ2:SHlxntp1HNDF0zWQ3p4R2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896261, "uuid": "dc8844c0-0631-4e1f-b21a-a426cc248ecf", "value": 71680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896261, "uuid": "8078e47e-f143-4f3d-a219-a8672c30af81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa7305c6-111f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896446, "uuid": "69cd59ce-4e2c-4d90-b928-17ac5200a684", "comment": "Malware payload (Mirai)", "value": "9070dec4837f3399a2a03f129e75fb56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896446, "uuid": "602506cf-0299-4b28-ad53-406ccad8b0ee", "comment": "Malware payload (Mirai)", "value": "e032f75ca262dea4ab1315f96c0714edefc97fe66ecabf96b504fa315b01d149", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896446, "uuid": "347c893c-6485-406c-b707-3effa70dbe4e", "value": "T14113F12286ED6C79DF7508327D9486C5521B1ED983CA7763A430166581CA2ECB0BEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896446, "uuid": "1a9fab64-1f5e-42bb-80f5-1ec4cedc92c9", "value": "768:FRBKRCfn9rrI1RqHL+52gBWdEyTFojmKkBoVLkY8IT/JsKiZ2YFjOhyss3Uozo:rB5lrrGWS52CWy8fKhhwc/+KCjJzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896446, "uuid": "d92e498f-180c-4d65-b0d9-394a50e8858b", "value": 43360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896446, "uuid": "f7444f76-796a-4b6b-b672-7a0c0b441191", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "095f6a2b-1120-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896471, "uuid": "31c26f9e-a7cd-4fef-b947-76ed6fc2d2b0", "comment": "Malware payload (Mirai)", "value": "b4358ee44b7650bbb29d8873b40bdc2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896471, "uuid": "66f72635-ded6-4738-9e5c-097912bd7545", "comment": "Malware payload (Mirai)", "value": "3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896471, "uuid": "9ca728a7-e915-4261-8b5b-b8e5781c811a", "value": "T13FC2E0785877A5B2E3201E7B79B5975B37FB07B8CEF925332514972823C41CA28F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896471, "uuid": "21cc8a61-395d-4847-9e51-f68ad55f1fe7", "value": "768:ivwcVP4oHWfu1hAMjLqkxBBmes3Uoz/k5E:ivwSwgz1hAVkbcDzM5E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896471, "uuid": "04627721-dd61-4931-95cf-41c0586f4990", "value": 25876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896471, "uuid": "b8db088b-33b7-41f0-bc67-a18827efd915", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37c98090-1120-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896549, "uuid": "8b62310f-a296-43e5-8d6e-a547f3400f83", "comment": "Malware payload (Mirai)", "value": "bca8f3a9349186363222590da36e9f30", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896549, "uuid": "7e66a35e-ed8b-4b84-8690-b5c8745db6a1", "comment": "Malware payload (Mirai)", "value": "b76210f3807c40462f1a8ec65fd3aa65833d9da520256088b57331949872050e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896549, "uuid": "90f1d7ca-9c35-4239-9b16-6671de89d325", "value": "T1A923F1BE020F4486CF94C135A3F47F554E3586FEA0678CAAC819F641EEA547AB813B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896549, "uuid": "22d2cb23-e184-462d-8eeb-5c9674bc2a81", "value": "768:pyyTHfUID0deTN1aOzEEBcKk5kOFAkmLypJJYx/0h7dlUa7YHDJtmhgsqeOJgGlA:pyyjfUzA13E2k5kO0GpJJYdM7dOHDTS3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896549, "uuid": "e4080057-a5e9-4a7b-8ae4-c10d80aff4aa", "value": 45740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896549, "uuid": "2136d45e-bd0b-493c-b5f5-56830d2ab141", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e2fc2fd-1120-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771896560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896560, "uuid": "7f4187af-e929-4b38-afc4-3a9fdb080a14", "comment": "Malware payload", "value": "5056a28d3b582277a979f584118f7f69", "object_relation": "md5", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896560, "uuid": "eebf47b7-f7da-4ee9-b592-54c63d3e3725", "comment": "Malware payload", "value": "71d94479d58c32d5618ca1e2329d8fa62f930e0612eb108ba3298441c6ba0302", "object_relation": "sha256", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896560, "uuid": "1364466e-31e1-4dd3-ae2b-de3777f695bb", "value": "T163B27D950588383C3BC989787B9C1F894965B3CF9EA23E44746B3755C12E9ADA70C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896560, "uuid": "a8192d92-7b09-4efe-a249-3b6259ecd1f0", "value": "384:I3ow8U2BlUvlB/LKtn4Vmkvotn4Vmkv4LW20M3vgRbqOBABo0i+Zf:Iow8U2PxymVxymz5m+OBABB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896560, "uuid": "10172c7c-bd43-4b66-84e7-e9793db072c9", "value": 25103, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896560, "uuid": "63531e4d-9d1d-49ab-9834-e1e1a915a177", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6070ea4b-1120-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896617, "uuid": "4f6c18f1-7193-40e4-942d-e74f0e9eeb40", "comment": "Malware payload (Mirai)", "value": "bb588f95b0a4748efb1affe14f1daa12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896617, "uuid": "07428fc7-3706-4944-9bc0-d6836e94089c", "comment": "Malware payload (Mirai)", "value": "412cbcb1cbc53f9f19e285cacca51884f1a147456149be6bf3c872d09d2eb2b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896617, "uuid": "b6f94186-4401-4f53-9918-184cde489106", "value": "T1CE233A03A5BC2E2BC4D0A63312B34363B1FA1B899194E64FBD650D4FAF543141A7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896617, "uuid": "8668078d-4958-498f-a045-4cb01c0cd14e", "value": "768:PnrJQ+o6L8mSiB/+2R2SQLg2Dt+h8GApq0ckmMdCtouyzVkMIZR5TE:PnNQ+PL8iBG2RZQLg2DQQYMdqymK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896617, "uuid": "939a0067-4dc9-40c6-b5cb-d1becd16f32d", "value": 48808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896617, "uuid": "10a42858-2b6f-46d2-9ce3-5c9bc61fbb65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ddab22e-10f7-11f1-8369-82aee05be84a", "comment": "Malware payload (AmateraStealer)", "timestamp": 1771896650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896650, "uuid": "0f814b38-ed7d-404a-91d4-308c4a066838", "comment": "Malware payload (AmateraStealer)", "value": "cc17896aa31cd557642ef0874a6cd7db", "object_relation": "md5", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896650, "uuid": "9ecdded5-116c-4052-a8c9-e71111a84d74", "comment": "Malware payload (AmateraStealer)", "value": "63cedb109aa1eb02c5c947f0988fe6f582f35ab7060ac8ba1d55fbd4aef36be1", "object_relation": "sha256", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896650, "uuid": "0ec240d4-0093-41a1-98c2-37444db57b1e", "value": "T1AD4612A5264D3616CC4B307F8A6C7F5C92EEE96C47049F9B8628CCF71A1335BA8785", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896650, "uuid": "c643a804-793b-4533-8194-f85076598a8d", "value": "c903b07a4fe92b7685b4f37b81527eb5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896650, "uuid": "a82b95d0-549a-44da-9f0a-8969a9b7098f", "value": "98304:LBZW6bD/D6t0XeUpGbeCqQPOB/LQaQwVvLzxeN7t4QazX3mWBNGl:LZE0OUECCqQo/rdLzxKgmU0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896650, "uuid": "f5bc35b5-d467-408f-ac9f-55129965cb34", "value": 5631416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896650, "uuid": "f4bf8777-2f8a-4f17-9220-1a205f7202ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "881f8679-1120-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771896684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896684, "uuid": "23a59e82-0c0c-4e07-b825-67e6f25f3e7c", "comment": "Malware payload", "value": "fc6d0d1570c2a1a164910e9ca931ea14", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896684, "uuid": "8ccd1fe9-339f-46a8-9753-57a2c9970e19", "comment": "Malware payload", "value": "fc9ad6b23ec5ad733bad7bd44e6e5a4ecde3ec09cf472fdcc0a76c8c8114e61f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896684, "uuid": "1ef6eae5-c62c-4871-af0f-715c4375cede", "value": "T1B434E0B1B2CBA8674D45314EA924787F12107EBC4F6740E4C22C4FE6C155ABD8BA5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896684, "uuid": "9c35e464-bd3f-4ca8-a8f0-63cf13e36bfb", "value": "6144:N5i74+syF3Lnbr63jbWH78lJm9o1LKLFiZQYlvsEMb:H3+tbr8bWb8nmtLnjb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896684, "uuid": "52c9efb3-0125-4371-8b09-e3fa75dab3eb", "value": 247873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896684, "uuid": "e96db2ae-6676-483c-95b2-531b9b991bb1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b70de7e4-1120-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896763, "uuid": "a52526ab-5b2f-4eb4-8ee4-c350fdd1f389", "comment": "Malware payload (Mirai)", "value": "354bcd6fa9bf352c7d4b176a942a9068", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896763, "uuid": "e6d2a1f6-de51-4dff-91f8-ba601c855cc8", "comment": "Malware payload (Mirai)", "value": "4159629de81010128604061cc3ff0e38e83460d67f3b84312c77d85bb821933a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896763, "uuid": "03a051d9-6cee-4d27-a51c-bf47ef03149d", "value": "T1A2834AD7F401CDBDF84AD77B44530906B131E3A25A830F36226BBD63AD361A55923F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896763, "uuid": "544fafbd-bb40-4591-be12-bdbe5606e455", "value": "1536:TQ0hlWpJeCR33RAk4oKgpi02X/WN8Ab9M8iR2a/7pc3FT7X5FT96r4S:bsR3hACw02X/Wrt6/tcV/cr4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896763, "uuid": "0be4be67-64ad-4849-895d-6906d3795e7b", "value": 85092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896763, "uuid": "4327606f-ffc9-408d-ad7a-9dbaf197e807", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f18ea4b4-1120-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896861, "uuid": "23ae1bec-67a4-44f6-a293-e8cad38a53e0", "comment": "Malware payload (Mirai)", "value": "1ff10e96c78002eb0b92697edb647b12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896861, "uuid": "7259921b-bdbf-4acd-9cc9-45eaf5fe3eaf", "comment": "Malware payload (Mirai)", "value": "9f3c1d176f3cc78bf678552ff62ede0f2249f00e97e3912752458c08bb07bb26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896861, "uuid": "5ffc7c91-4c38-4e64-a7d9-ecc9fbc043a2", "value": "T1C6737D99FB57D0F0D94205B011ABFB3A9631DD361014DE6BEB88FE36BC3264294563", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896861, "uuid": "cc6bd7c0-8709-42f9-9362-3f67d965b377", "value": "1536:Lp9vxnA7U15vbIHfC1j83YAKoRYeyUz31Ai6I2r:LplxA7U/8HfC1YJbKO+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896861, "uuid": "00cac73b-1431-4cb4-a0c3-309666b4c1fe", "value": 78900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896861, "uuid": "9d6f1a81-4e4b-4b93-8716-a2c5b51a858d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff66544b-1120-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896884, "uuid": "9bb541cc-040d-49ad-a606-6a421e9e1e4a", "comment": "Malware payload (Mirai)", "value": "ff9b80af019d08811ed95e0a0cabd6b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896884, "uuid": "49cf08f7-9f32-4f4d-a3bd-e21fd4241cec", "comment": "Malware payload (Mirai)", "value": "fcefe0fc3a017c59af6ab3737c48196f641296c1d1f0673593d6147bead541ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896884, "uuid": "019a4a0a-8650-44bf-a54e-bcdd7df1c59f", "value": "T163333B96F8925A6AC6D046BA772EA68B335763B5C2CF7353C84C0B11768AB0F0D73D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896884, "uuid": "3bc92bce-bc4d-418e-acd2-bd2b51b5e723", "value": "768:o19Q7e/K9+cp2pLQo/C0JXxt7qihVrn7A4blnML2F+n95zz:iAe/K9ap8gJhtWiXrn7N0T1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896884, "uuid": "2e4fce3a-7bd3-4f04-a4c9-a16c9792f8d8", "value": 51048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896884, "uuid": "68cf3231-f98e-4aee-91bf-1e9a40f2af05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34fee690-1121-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771896974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896974, "uuid": "6a2ff524-f909-46e3-aaaf-0c25877bfcd3", "comment": "Malware payload (Mirai)", "value": "fd40f5cc62efcd7c3f4c04910e9689d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896974, "uuid": "9c4a00d9-4a5e-473d-aaef-a5dbf50d2a46", "comment": "Malware payload (Mirai)", "value": "37b12cc3ff81876c3ce04db3a9544416b7a5384cb41f2190d1041386819dd208", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896974, "uuid": "2406deb6-bbe4-4f74-a3ae-da09d862da28", "value": "T12713F143D124CB2DD1CD5D3C3DB6A8450910D96F22A98D23E7DE7537281BF212DBB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896974, "uuid": "23b62407-9db3-471a-a859-84d243e9d860", "value": "768:LTAkhfe4CdVgp+QYLSl5wBrEfEMC0pk1kuCFcPZwW+p9ujWnbcuyD7UHQRjf:3Ae244cQREfA1kNFijw4Wnouy8Hyj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896974, "uuid": "7e136f3c-596c-4b7c-8c2e-6a47f185eed3", "value": 43284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896974, "uuid": "931e7cfc-50f3-43d4-93c8-23553ccbcd65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38fc7d2b-1121-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771896981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896981, "uuid": "bbc8c67b-a526-4397-b546-771a7210a419", "comment": "Malware payload", "value": "575de0b551968a2a50b682edffbf5556", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896981, "uuid": "14681806-a581-4e07-9eb9-4e82b93aec91", "comment": "Malware payload", "value": "d04331db37dc00378f4f9fb9ed751cd40d6957d563556cdd4ffdc384714c0492", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896981, "uuid": "162158f4-ede2-45ce-850e-eaa9c83872ff", "value": "T1E08309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896981, "uuid": "0bd27267-6b68-41d8-b18a-84253208275a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnLWaRVN/:XEKltp9txAX/yr2pbLWsVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771896981, "uuid": "57332cb8-4c1f-45c0-9e09-899b57cca405", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896981, "uuid": "d1e4f321-5404-4a10-8551-db11177e126f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78cd389b-1121-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771897088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897088, "uuid": "a7d1fb00-086f-4f4d-967a-8c2badd6e155", "comment": "Malware payload", "value": "4fd6fa9d27c278955ac97b5cf95bb996", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897088, "uuid": "61b43a09-1167-496f-a6aa-0f1b8b3d9c4b", "comment": "Malware payload", "value": "4e3eb69ec25b36eab688f4f1ae39f1c2de0ccb2b48fe21b04c35f18ce960e19e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897088, "uuid": "cbb8fa64-d69e-407c-bac4-e5787409494d", "value": "T17E34F12D816C2A70BD6A4DD85447801BF400F837959B7C60AA8B987383B39E6D37DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897088, "uuid": "33e5b680-10fe-41f2-bed2-3d7cc955143d", "value": "3072:bFnUVxi7rQoea5O8aFuEeHKaDyqTQKOc0Cgf+JBGcieY7pPcw8u+NGigPCATYh2I:RU7grQtakeHZuqa5CwXcieocxN9gwN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897088, "uuid": "19f58fbd-7762-484d-9b34-a6f563e2c2df", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897088, "uuid": "67e1a630-8a95-4b96-a110-a0e25fbfc3f7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85de5962-1121-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771897110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897110, "uuid": "0d22de20-ad81-4d07-8d09-4d675b1c81db", "comment": "Malware payload (Mirai)", "value": "460105e2ef306ae818611977fd6a7e12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897110, "uuid": "d429f536-071e-430e-86e0-ff73751e8888", "comment": "Malware payload (Mirai)", "value": "66544e0e6845406334e1e5dd9812455ee92b09ba75f2cd03926566685f43b2fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897110, "uuid": "b782474d-4996-4d3e-bc40-0359f3a7ee74", "value": "T1D8D3AD97F28B04A0C86206F013CB0F9E2E6321814F5BD5E37D6EA63B6E754DB1905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897110, "uuid": "d79ac174-c885-414f-bf96-98ca03daa61f", "value": "1536:R1vA3mQvW1HcyEpyOxncfFkOxZJDU1NJOlQQkW81x6U9grMn+/LW1:4tvByEp5xncfFkuZ5U1NIjkW8Pgr4+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897110, "uuid": "06a9c6b7-f53f-4e46-bfbc-d737de37d030", "value": 132644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897110, "uuid": "b6fa1590-75f5-4508-b3c2-4098b0237e60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95038e3d-1121-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771897135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897135, "uuid": "a607bbe0-25bb-4bf8-8e0c-4e22c1ac990a", "comment": "Malware payload (Mirai)", "value": "a9b772fb2851900b26f2604bc1547525", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897135, "uuid": "7075cbbb-fdfa-40e0-9873-50c12e5d965b", "comment": "Malware payload (Mirai)", "value": "d8985ccccad286cc3d7101f8fa5a1ffdf3689d52b4100b6b543bf3496edf420b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897135, "uuid": "67f3bd9e-acbd-456e-85f7-5e892e151e4e", "value": "T11923F189F4686565DC5F1D3A6CED2A962993F0C236978B8CB3316C68F324CC12AC64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897135, "uuid": "e7ce13c7-720a-4108-8cc9-a5672c9f2f7d", "value": "768:Yj38dwSWkcb8OniN1onqwBjNFfCsTleZFxdBg8nxohMFAhcddXe87qehWOO:YjMdLWkcbsqRBjTrc9dBg8ncMFAhcrN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897135, "uuid": "ac4fce49-0cac-4539-85ef-33556d61b187", "value": 46940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897135, "uuid": "02ba6144-557e-40c4-acad-f6aa7d7029e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21613848-1122-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1771897371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897371, "uuid": "5c08b091-d7c0-4c5f-87d7-152e6fa5641f", "comment": "Malware payload (RedLineStealer)", "value": "838703d503b5c20e07412c080c1dfc62", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897371, "uuid": "8cdcc9f7-f94e-4ea3-b80c-f9b8be4cbdc5", "comment": "Malware payload (RedLineStealer)", "value": "599f8044ac833677564223f34b28fc9286c40683095485ba366ec465accdfa74", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897371, "uuid": "e0ef9061-dcbb-4479-bd1d-3835d4dc9060", "value": "T1C5645A5833E8CA10DA7F4775D861D67093B0BC63A552E70B4FC4ACAB3D32740EA51A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897371, "uuid": "53c28af8-d484-450a-801a-0110fd2e7267", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897371, "uuid": "a1830dd3-cf21-4e21-98a8-7b83456bd089", "value": "3072:KcZqf7D34dp/0+mAOkyoSMQQgqDB1fA0PuTVAtkxzl3RceqiOL2bBOA:KcZqf7DIHnmn8B1fA0GTV8k3kL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897371, "uuid": "2bcee8b2-9f74-468d-bd57-fb283276328a", "value": 307712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897371, "uuid": "d727976b-bd3f-4895-ad24-f373377c7279", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab26c2b-1122-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771897413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897413, "uuid": "e28cf2ad-f6f8-4c6d-b22b-9ed455318fe2", "comment": "Malware payload (Mirai)", "value": "4ed362bafdeb62e06800359e0b1857f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897413, "uuid": "d4b68c3a-ef54-4375-a184-ba51371a45bd", "comment": "Malware payload (Mirai)", "value": "e5d53a8beff502b464f121a77216b7ddbcfec74bd46e6980cf50e32fbbe0786d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897413, "uuid": "8e0d3eb4-45b1-401d-97ca-91e367a945f8", "value": "T140A3E809EF614FFBE86FDD374AF9070125CC551621A87B367974D828F64B24B0AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897413, "uuid": "1de9978e-9079-45db-ae9c-3d8e45c797c6", "value": "1536:QX2Sb7omV6ng6DH4XhnKi28Pi+Z9yIxrWwO/xT1BZlTXA9Udc5LI:QX2Sb7omM4XhKvwYxBBnGL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897413, "uuid": "e95af7bb-2188-4bcc-b2a6-b8ced7c9c444", "value": 102004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897413, "uuid": "f0ecce13-1ed1-4ae4-8d03-aa2b5e717940", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87c8eba1-1122-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771897542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897542, "uuid": "874abe27-3381-41d3-90fb-30cffbabcbaa", "comment": "Malware payload", "value": "02b544672339676f4987372df054f3ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897542, "uuid": "c213edd8-4c81-4462-8482-1065faa3de6e", "comment": "Malware payload", "value": "5238cc39a251ce47c33c4c21996c84420e3703e6a6742cb09ddaeec027f46118", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897542, "uuid": "6870eaad-1025-4744-897c-c572eeb651cb", "value": "T1F7663A136A28EB0EE22422305CF2DA88276A5C8641D7E517B355F318E9F306D8D6FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897542, "uuid": "29d38ffd-6120-41fc-9acf-a13d8c374acf", "value": "49152:daJq9TYGtGIbcAH454el2sop2AVVvDXOMxgiAhotNjNYghruHLpKi94x+7HH4t5A:diAz2pJ94x6n4jEP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897542, "uuid": "08a1bd63-01e7-4c8e-8b56-14428c0e973d", "value": 6488257, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897542, "uuid": "54139d33-7958-45c9-b60f-020cb555630f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb0fd0e4-1122-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771897655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897655, "uuid": "efa765f4-74a1-4a0c-8a35-1e728625677f", "comment": "Malware payload (Mirai)", "value": "7b063816a463bcb87d74f8be1ab12744", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897655, "uuid": "c40e6487-7679-487f-b92f-80e6ef74b8ae", "comment": "Malware payload (Mirai)", "value": "d264f20ab53dfbc2d088af7144d73b2f4e96476bc6c1cb9a97e4ee97c9cbfe35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897655, "uuid": "4b57f878-4860-4241-8617-9940fb0131aa", "value": "T1B8631238621A7532DE406B72C0FDC6C5824C4EB835BE5358AEA10D78CDEA2276C657", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897655, "uuid": "5816faeb-70e7-48e9-9a39-511da13c25ba", "value": "1536:yWMveaXjLbdMq7IlPjHneJnMLAc0EaHQJWhNH:yWMXXjD7ojHeJMLHaHQaNH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897655, "uuid": "5fb2ecc7-808c-49cb-bb2f-7181e5c5fe7a", "value": 69064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897655, "uuid": "ef684b26-bb7f-444f-ba6f-6c592dc2447c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10bf1619-1123-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771897772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897772, "uuid": "5ee9ef72-7303-4c53-abe9-f2cce1a1f7c8", "comment": "Malware payload (Mirai)", "value": "f4ce35153a91b43c7fc685cf15a00da8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897772, "uuid": "58776b34-08f8-486d-96b2-060469879a99", "comment": "Malware payload (Mirai)", "value": "c577845c7cdc0b209ba76c99bb2a12609094a247f0312e7718ae4a482785a0fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897772, "uuid": "acace047-7617-40a4-9179-4dcc87265ab1", "value": "T1F6733A96FD818617C6C512B7FB2F428E376623A8E2DE3203DC156F21338A96B0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897772, "uuid": "19713f7a-6eca-4aa1-ac3c-4655098e77a5", "value": "1536:mTtwRsU+4+WYA8QBX4f9YiWvjNJmEbHReUvr7e:mTSRsU+4386KCjvjHxxX3e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771897772, "uuid": "1d546bd9-7e08-44b9-a392-d93e50c5458b", "value": 80488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771897772, "uuid": "9043aa16-acf7-42ae-879e-786e6fbf19ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c63a7ad-1124-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771898194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898194, "uuid": "c5b91c43-85c6-4451-8bc0-51054e46d6a9", "comment": "Malware payload (Mirai)", "value": "318893281288c8937dbf8e49bdc98d1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898194, "uuid": "15a6b5f0-d307-4b62-aa1d-83c128d5878e", "comment": "Malware payload (Mirai)", "value": "a24141b4b1836ca165549688a1b1b8a478ccce163ff737d0981535ce3379ba32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898194, "uuid": "a0853118-065f-4429-8504-fcc9b5b6053d", "value": "T14CA33ADAF400DEBEF80FD77B44570A19B971A3D206830F27635BB963BD321951862E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898194, "uuid": "78bd59c0-70ed-4053-bf98-c64bdd78ff11", "value": "3072:BUKnxMWAl0807jZ54ytE/YLMngYS9KwOsd2/OM:9MWbQytgYLMngZ9Bd2/OM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771898194, "uuid": "7c5f3d81-66fc-4b23-80c7-62c05cda8c55", "value": 101736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898194, "uuid": "f7f2bd4e-b58d-4673-92c5-7874b59fe5e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23ed8586-1124-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771898234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898234, "uuid": "f697e844-c885-4d70-9af5-82acd336a4b3", "comment": "Malware payload (Mirai)", "value": "7561a982f0b5291c102a22b6a7124569", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898234, "uuid": "4d190d72-3694-479d-bb5f-2e54e8432fb7", "comment": "Malware payload (Mirai)", "value": "ff268fb324b69cfbf60d93d5f214e0a935fe6dc117f62a91c43b63e297226a87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898234, "uuid": "a034b66e-f2ff-4bc6-9c93-5e814e4472a4", "value": "T1C613E167E0B00B03ED1EB5301DBAB01E49F5852EFE34A8B3D9D8F07AD595F8849194", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898234, "uuid": "ee34f7d9-6758-4cfc-addb-aa21a11206e9", "value": "768:s4PgzPW3vSyhZxnOEQTWASbqyHKOAhB/e3FWoqMfnbcuyD7UHQRjm:dPEYSyHBOEQyPbJKOAr/ecTAnouy8Hyi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771898234, "uuid": "0bf89d61-2320-4b9d-8c07-015e0083aae9", "value": 42068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898234, "uuid": "3b6dbd01-8c5e-4f23-b55f-b88b5f884cee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9aabb8e7-1124-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771898433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898433, "uuid": "3fb7627b-eed6-4385-bc43-507762743fcd", "comment": "Malware payload", "value": "ae93f4d5f9bee0e46a8ca5de8e88f52b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898433, "uuid": "3f924c45-29b7-4806-bd4d-03d0a1d9b182", "comment": "Malware payload", "value": "76e59e54ee62908508d35aad3463b6194e591e36f936fe29590f48b0cbeae1b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898433, "uuid": "37c9190b-4c60-49c3-ada6-fc17e27a34b5", "value": "T10FA3E91916670890F1EEDDC00D85B8BA1A1377B3A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898433, "uuid": "a1b8f185-11ae-43b5-ba4c-ea2762d9efd0", "value": "1536:34Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAZ:IgVBH3mPm+sqk+HAw0F5KijXxZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771898433, "uuid": "b767dcfb-5627-4f8e-b9f4-f5cf6604caa0", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898433, "uuid": "c8cb7e3d-bf7e-4404-a746-d9a24e381c52", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e14d1e30-1125-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771898981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898981, "uuid": "c4f56090-5cfe-452b-a7f0-0a1b68e8269e", "comment": "Malware payload", "value": "372324decd80c9985e06b8a4b66bfdfa", "object_relation": "md5", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898981, "uuid": "c10dc1db-4f5b-4e89-98ae-a68c8f1158fc", "comment": "Malware payload", "value": "1b5c10f6101a90728b135abfd9879da78400b7939f0dbd2c851b30ef51c8276d", "object_relation": "sha256", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898981, "uuid": "237abbba-bc72-4289-927f-3bdc5b490a86", "value": "T165544B4A73A440F5D8A79139C9A38A46E7B2B855077193CF43A443B95F3B7D09E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898981, "uuid": "45ddf9fe-a3a6-48db-8c1b-a8c99b4d96d5", "value": "b31da0971f03ad8d978723cd8ca7b5a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898981, "uuid": "64fa52d0-6c31-4db5-8309-7aa6aab0b6d3", "value": "6144:r5tTACTcSFHR+2noN9jxsTXqmTKo28LX/bh+27:rnldAxsFTh+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771898981, "uuid": "e569256a-5cce-4ea3-bf63-eb03ac96b53e", "value": 297472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771898981, "uuid": "6555dd55-1417-4532-830e-bf1ec68f0037", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e7fb84a-1126-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771899272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899272, "uuid": "14ec5fc5-ec05-410a-959c-b6c4a027bafe", "comment": "Malware payload", "value": "997f2392b02df6a0e414af01905f93c2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899272, "uuid": "78bf2878-f697-45d7-aafc-bb41d863a316", "comment": "Malware payload", "value": "9ebcca59d79dae00ec8cb9c398f380f9abff5e7c14a8d942c67388efca350564", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899272, "uuid": "01b4b6ed-7d09-4bb6-bf71-d06918f156d4", "value": "T19F34CE4DA578F709C4D06A9D481ADF5E49C895242BBB3D27B78BC490A7A40BCD36F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899272, "uuid": "d4904ad3-1d61-432c-be9b-1643514b83a4", "value": "3072:pIWG5nee9Ijjf2rJ3gbklM+dPPl3TL52Xzmp3DPZgC/skohj5Nh8bDy3NJlU7qj2:KhehjfyhPPl3PAqVDBjE9h6+N07qj2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771899272, "uuid": "daff337d-d6cd-4f86-bbc3-76afc3820911", "value": 239707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899272, "uuid": "a6d18209-7da1-4b8a-8fea-f2f909792439", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de8dd2df-1126-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771899406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899406, "uuid": "39ae2d47-8952-4ae9-b75d-146060f629ac", "comment": "Malware payload (Mirai)", "value": "a42da0413aae6e480069c9ccd53b43dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899406, "uuid": "ba4c4c49-3706-4266-80a9-91addbc83a91", "comment": "Malware payload (Mirai)", "value": "9841c75cc1905e565c6c8aa1715fd8f8324bdbceb76eec5f6d708664aa5562b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899406, "uuid": "ffc06357-d5f4-4b37-8e17-7654d1f472df", "value": "T18EA3C94E6E318FADF768863047B34F25A39823D636E1D685E26CD9041F7034E646FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899406, "uuid": "374dcbfa-db2e-4f8f-93ea-cea82a4cb57b", "value": "1536:btM1D9VDrDQgzyrnZ3g6gs6oOVpamU5zcOeI7wUzsSX:QvD3j4nZ3Q7paX5zctysSX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771899406, "uuid": "7831bd26-4716-4389-8c19-f903731f24da", "value": 101716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899406, "uuid": "268cae8a-b88b-4a51-a73c-5d8f2f1fe5f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceb4ee45-1128-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771900238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900238, "uuid": "5211fead-b2c8-4aca-add6-4ae377ed0e9e", "comment": "Malware payload (Mirai)", "value": "04a7ebea5597e6396cb78837a003f893", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900238, "uuid": "0c78c3a0-1676-4f49-aaba-f194839c6254", "comment": "Malware payload (Mirai)", "value": "ed5290853f112ae7042a35cd55f68fb00eae0c92da312b7b984bfccdaa21160a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900238, "uuid": "233f33a8-861e-41ce-8e86-0f1cca044aca", "value": "T12B23F279B695BCB64FD23E338529104AC6287FF4C675301295704BE8A3E7119AB9C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900238, "uuid": "782fbd39-9740-47a3-bf09-93a7654bc1f5", "value": "768:SRn98HoEZiiDq8+T1l3RlRyJ8JPyfZBOjsBd2WA5jIKQwd9q3UELjG:StKHVq8+T19O8WZ0jCBULQwwLC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771900238, "uuid": "62001135-3206-4b6b-be04-a44b33f2511a", "value": 46440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900238, "uuid": "2fd57db7-3089-4a0c-9523-2797452606d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771900267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900267, "uuid": "5472e98b-ac86-4ace-9885-8410151dc4ae", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900267, "uuid": "88567dfd-eca8-44b0-bec9-85c9ee161113", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900267, "uuid": "d1592d93-9c2d-455b-bc41-d1cee33ccd96", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900267, "uuid": "1a492da6-65da-483f-9318-a7366daefd90", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771900267, "uuid": "8c321ffb-b871-4c63-a30b-9c3253c61fe9", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e64061d7-1128-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771900278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900278, "uuid": "ba08d9fe-205d-405c-bc75-f84c38ec9f38", "comment": "Malware payload", "value": "65bd8881737162ebe8a80350228641e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900278, "uuid": "cdd02e7a-c69d-4c06-a1a2-555184739e0a", "comment": "Malware payload", "value": "5a0f207f16effe4dc23342e284577872c0871f3cddf7b66ecc2ba9be7dfc6ded", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900278, "uuid": "4592da4d-1cbf-453b-b80c-a94c12b337b5", "value": "T105068D17FCE508B6C0EAA23289A751927B71FC490B2123D72F50B6782F72BD49D7A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900278, "uuid": "6005801a-fbed-4e31-a2f4-5852f0aacf51", "value": "49152:O6SNykyGW4/PenBsjUGba23HhVMFww59a8HZnDpvmafskON:O6/kRk7WMFvEsZnDlYN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771900278, "uuid": "567c888f-ba23-40e2-89e5-526d14b30563", "value": 3693816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900278, "uuid": "6cf8c0df-2241-446d-963e-00f7d9e2400d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a26652a-1129-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771900553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900553, "uuid": "005080ac-7cc2-4207-9487-ecc34d569c2d", "comment": "Malware payload", "value": "b17d921604b55239bf365216ca2c2b21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900553, "uuid": "aa9e05e0-adcf-49b4-973f-f94577916256", "comment": "Malware payload", "value": "b0017c195dea1e1b4a42b7854fea8d23118889a7311d6316d62ec6c59b1b853d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900553, "uuid": "0835d563-ad91-4b74-ad8a-03fd2fa551bf", "value": "T119462821FECB14F6E6031E3144BBA26F63315D058B24EBD7EB447E29F977A9119322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900553, "uuid": "1bfa15fd-8486-40be-aac8-e80a4fdf28ab", "value": "49152:cXfcOhRy726YJaliRSUrCI2pd2yFz7pifUEyB6eSria3UI5Ey:cXfLhRyqjYwRSijKd2yp7Tn63U6Ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771900553, "uuid": "0607b948-05ec-4bd1-8a1f-38e50f919092", "value": 5726370, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900553, "uuid": "cbbf3d89-82c6-4f91-91f0-71a4faeb9c9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92a78acb-1129-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771900567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900567, "uuid": "4c7cbcc2-13f3-4da2-94c8-cccbe6562608", "comment": "Malware payload (Mirai)", "value": "831f045dac9cfe91f940d308ce5f8891", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900567, "uuid": "f2856a9f-cd89-41bf-aba0-47a136b52e05", "comment": "Malware payload (Mirai)", "value": "4d012f4c6b905c0da5d04c1453f14bcf1f143020c26756f99a636824c1aa46ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900567, "uuid": "7bc4bfbd-274f-4cb2-ba92-21c8b9abf6ba", "value": "T16613F2FB822BE87CC47121F0923769E8F8F669124767671B85E8621958D7F231F20F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900567, "uuid": "ff1e14f3-1f2e-41be-b221-cbf271b6bbff", "value": "768:8Pe+m4qMdu95qSlk7hdzxZUoTcmPC02H3XBNk2pT5dkw9uCPPT18QINx0TnW:8PeH4q8dldLFTDUH3xy2ndN9fPp8JAW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771900567, "uuid": "2d85f861-50d3-4817-aee2-f551366f61f7", "value": 44752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900567, "uuid": "735db771-b77f-4462-bb3d-a20f01f96b7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771900761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900761, "uuid": "7fe0069d-e777-49d3-bcc3-960ef55e9ec9", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900761, "uuid": "f071d759-fe4a-47b9-a37b-5f60d8c208fa", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900761, "uuid": "04b1db3b-87e8-4498-ae53-2146f83b90a1", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900761, "uuid": "d8e85e77-6b79-4a36-aa7d-1bf2fc34e1ab", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771900761, "uuid": "9fdfc351-5837-455d-b05a-d2536ab6744e", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771903934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771903934, "uuid": "15cc18cc-4d87-48b6-8bbd-dad452ff679e", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771903934, "uuid": "8b24056c-d784-4708-b492-f604e0fc7398", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771903934, "uuid": "21263064-c37a-44bf-96e1-a10492b93ff0", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771903934, "uuid": "d9703edb-0081-4973-b3c0-4c31d1a53714", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771903934, "uuid": "b901df3b-2cfd-4d57-9385-f4c4e07d7c95", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd1a6ccb-114c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771915698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915698, "uuid": "ff7147d8-cbdd-4cda-bf6a-05fa0e5df3cc", "comment": "Malware payload", "value": "a890a03ff4855e9a5ebf39129aa672e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915698, "uuid": "03577d10-7562-4602-8e11-7b251ba82a7d", "comment": "Malware payload", "value": "2efa369d053066fcadeb8c53e7d360cf7cec87adfb7d896d20e63ddb35cfdd80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771915698, "uuid": "8a25d5e4-6062-45a7-9cc9-a101820ac5fc", "value": "T12FA68B41FDCB10FAEA430A3105ABB27F23315C064F64EBD7EA407B29F97B69519362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771915698, "uuid": "6335e86f-e473-4a83-8d0c-856d522327bf", "value": "98304:kG0uQP6YUL0bIrtvj2oyMp3Xkz16E4+he9y1X4CScC2G+HunywM1QQj:d5Y/8rtvj2mp61n4qlpj5CUH+ywSj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771915698, "uuid": "3bc6f3c2-2b45-4e26-b3a2-54b3db774645", "value": 10233601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771915698, "uuid": "fd3a6be2-005d-41ec-891f-f362d8eb6426", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "924218dd-114f-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771916887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916887, "uuid": "b65146cb-6dae-4b57-ac71-e53ae8fdd8ce", "comment": "Malware payload (ConnectWise)", "value": "e18e36e04bf58ebc7d82afba78a67033", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916887, "uuid": "564e74d6-ec83-49d1-ace3-caf11eddc99f", "comment": "Malware payload (ConnectWise)", "value": "fb8ee60d2690599e61d62d8033a6a4cd2685e33d3cbf00262b448624d1aa7aaf", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916887, "uuid": "5c3ebeb2-7801-4d43-acbf-f47fe17e45a9", "value": "T12F646C11B9C48432C673383107B4E2B28DBDB8302D655B9F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916887, "uuid": "69ce2634-e2c9-4c5d-9779-da8edb27da8a", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916887, "uuid": "d1318211-1954-4203-8042-fc3a2b060d91", "value": "6144:9mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti9c:41iw7gryNkSV1hy1Z1u2JLI9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771916887, "uuid": "14251123-554c-4edc-9b84-25230bb01532", "value": 312568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916887, "uuid": "fbc7ff76-3dde-4b1a-8313-d780c7d6a680", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fa3dc96-1150-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771917178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917178, "uuid": "b4720fa2-664e-44a7-8f4c-8f56befc6b43", "comment": "Malware payload (ConnectWise)", "value": "aa99b924bfa335587b2298ae71d78393", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917178, "uuid": "2995bacb-b258-4224-abb4-8e0c532db5f0", "comment": "Malware payload (ConnectWise)", "value": "9730a52df2875f2c7a56e5071685d8bbba3de7bc70a3fb1f149b6a6f49979b7e", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917178, "uuid": "cf0ad0be-fe36-442d-8fee-db4e89862d61", "value": "T100E522313254C03AE5B61A3DCD3682F169A9AE28CB63855B93B47D1D3D70D8067B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917178, "uuid": "bc3adf04-0af8-421d-bba5-56b66c49fe24", "value": "49152:R1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqMpvlqs0O4iO2z1gI:RwJ4t1h0cG5FGJRPxow8OP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771917178, "uuid": "9334db5a-3e45-409d-adb9-8133f0b69ecc", "value": 3051520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917178, "uuid": "b3832fb5-2055-4163-9d65-743255a0ce81", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7971d4ba-1152-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771918134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918134, "uuid": "fa8a95a3-1b2d-475e-b99b-8b4107e789ac", "comment": "Malware payload (Mirai)", "value": "23e1971c4bf0f2496fe707a68602e0aa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918134, "uuid": "38d46461-ff0a-4901-b2c8-7d1c75582044", "comment": "Malware payload (Mirai)", "value": "db8332da87936c4e44b1ad98823de83395f1d0db5af0f9e99a2a13d02bdb9a88", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918134, "uuid": "cb097fc6-2d75-426c-856a-943a9db68a42", "value": "T16F5193C702510AF97C63BAA3FDBF8EDC3686509268E17F0456DC34E5629CD9834D8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918134, "uuid": "6a9d569f-5902-4ad2-af75-1dafc0fa7171", "value": "48:inohmlnKnElnfCXlnTePlnaOazvZlnaUaFvjln9N89z4gelnejclnPSvlnjOjzq0:i6mlaElKXlqPlaPzvZlaZFvjl9Yz4ZlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771918134, "uuid": "c0a7b114-0541-4d72-9497-46ab2428d37d", "value": 2959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918134, "uuid": "39ef6ede-b4ed-498d-a349-f6462321d8a2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02d7821e-1153-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771918365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918365, "uuid": "ff0b8c07-0b49-46b7-9b48-d3c1add7ba9f", "comment": "Malware payload", "value": "e86c2570f8834e0efa056a4d86a835ac", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918365, "uuid": "9d198cee-e19d-4834-868d-1d8d8236fd80", "comment": "Malware payload", "value": "e6d961f10bf6f9891f580c30e65e1c39479d2bee42e96f84033edb5edce8a3b5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918365, "uuid": "4171b7cd-bc55-4e09-a922-67422459849d", "value": "T1CF663329C35BA51C444ED111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918365, "uuid": "ad3309dd-14cc-4ce5-b3cb-6f3a6e0fb59d", "value": "196608:SyrPO3UDsdXp+z8+FWyGyrPO3UDsdXp+z8+FWyE:YKsD+FW3KsD+FWR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771918365, "uuid": "17f7ead8-c63a-4ac4-a9f5-114852bf7437", "value": 7054950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918365, "uuid": "5c100330-7316-4a22-86b6-3c8aadae7603", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "837dc143-1156-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771919869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771919869, "uuid": "aaffc577-8451-496f-ba5f-ab3ce92a730f", "comment": "Malware payload", "value": "c1a5f7f0a5ca19a56d432fc7a15f2d50", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771919869, "uuid": "58458007-b43c-4c19-b22f-4517da4de80b", "comment": "Malware payload", "value": "3a39c2c747927b7aafa5e1b07aa9cd2e648d3fafb3c0b19d7687742727b1f7b4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771919869, "uuid": "2df5a5af-688b-412a-b90f-560fbe788c66", "value": "T1E434F146E9B7B4ADA0CD732F07B66DCA85B31061BC9236342F2139091F0AFD649FE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771919869, "uuid": "39349413-9744-4865-a561-d0b03cafaa00", "value": "6144:3pdES9CMZbwSPusZYo82zIhgrYN84JQ/wLT+o:3pzwxs+B2zIhC684HTr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771919869, "uuid": "34c5ee7e-9d71-4039-9e71-0fc1865dc04a", "value": 247884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771919869, "uuid": "b15b7c0e-650b-468c-8d16-d4afc0e8d547", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "802ea1b5-1157-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771920293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920293, "uuid": "f30a3d8b-f2b8-4058-b355-d2432f609b77", "comment": "Malware payload", "value": "cc8344c7509ebd1722f370e535c4bd3b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920293, "uuid": "b96e5b4a-a259-447a-bc77-0ea989fe3a3b", "comment": "Malware payload", "value": "a26f79bd996c547b1ed86d33feaadc023f21e24df6a278ab2a054af570b206bc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920293, "uuid": "f077f0e2-9fff-4ec7-9471-8ca4f2105f8c", "value": "T19B35EDA8D4EA85F8108B12017D069BF1AF34594BE491957BF6FFB2DBC86003597893", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920293, "uuid": "48bd5dae-2b2e-4ffa-83cd-caa66cd7fcd1", "value": "1536:+PJpztO0b1x8OABtYMSdEUeFWwM6zoJN+5TNCdS9O/Qta:I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771920293, "uuid": "cb575e7c-825a-442b-bf45-aac02d9156f7", "value": 1150445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920293, "uuid": "1f2cc3db-9b74-49b4-b23f-3daac37d70f2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24097178-1159-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771920997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920997, "uuid": "58ae580e-4e96-4536-945d-950c31cb69cc", "comment": "Malware payload (ConnectWise)", "value": "ca3f209fce636c52afa63f284953083f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920997, "uuid": "71abe227-d98e-4b09-9573-e3538caefaa9", "comment": "Malware payload (ConnectWise)", "value": "a96decfd6759c1da6d4313bfc4bb0721e4889eed8b17208c6c487a093bffe3f0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920997, "uuid": "bc282776-eaa3-428d-bb75-35228d4332a7", "value": "T1D2E522303254C03AE5B6193DDD3A82F569A8AE28CB63855B93B47E1D3D70D8057B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920997, "uuid": "ee0ea978-5349-4adb-ac4d-8614e28a7e72", "value": "49152:91yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqMpvlqs0O4iO2z1g:9wJ4t1h0cG5FGJRPxow8O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771920997, "uuid": "c755189a-3819-40fa-ab65-4fcf2300663d", "value": 3039232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920997, "uuid": "8e609d78-c8fb-486d-b807-e4f5171dadba", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ab633c2-115b-11f1-8369-82aee05be84a", "comment": "Malware payload (BillGates)", "timestamp": 1771921814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921814, "uuid": "5d035a86-65d7-42cb-b16a-7453bf0f6a8f", "comment": "Malware payload (BillGates)", "value": "a7e83c8d556405a858066443a24de166", "object_relation": "md5", "Tag": [ { "name": "BillGates", "colour": "#8D0349", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921814, "uuid": "72330a87-0520-4256-b488-bb384c16d6c2", "comment": "Malware payload (BillGates)", "value": "df25ef9f86602c619ea0d6702feb571efda915bc029efd05fd440c50e1dfa57d", "object_relation": "sha256", "Tag": [ { "name": "BillGates", "colour": "#8D0349", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921814, "uuid": "d334dcea-a98a-48f6-8cbe-9891eebcc7e7", "value": "T144D57D03BDD08CB2C45A5272451A9572B671BC655B2297DB7F44FB3C3F366C0AA3A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921814, "uuid": "bd1b86af-683f-4f66-b47d-8e8a86ed2f68", "value": "49152:k2IbgRK6n45vRVJKGtSA0VWeoZu9pCY26+:cesRVJK0SzVWXu9pv+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771921814, "uuid": "cc05dfd0-0958-4129-814b-1f3e7acc5112", "value": 2830488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921814, "uuid": "a0fcdeb5-53ed-471d-9c4f-6f23966b306e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f325e89-115b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771921875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921875, "uuid": "b32faa44-2cad-4aa4-a0d6-535295b2c3a7", "comment": "Malware payload", "value": "20d367286001e5e5e603fcc944b483ce", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921875, "uuid": "fa1992ff-2579-471c-bb32-67c0974470dd", "comment": "Malware payload", "value": "b62e73892d4d3f266a7f0c75cf3746fbaf92948ea8c4565595983ec6c5852feb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921875, "uuid": "b0489ced-3b45-48e4-8cf6-c072baa159d8", "value": "T1B057F023F50529AADDD6A135F5E3579532301A540393A339271FE12AFDE25CECA33A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921875, "uuid": "040125a2-ebc7-40b3-8755-265eca2b1dad", "value": "393216:KxfIk5aBVHZV2R+sl7eJ8+DzGJXqDhxMIDfgkTeCmuKZKPIwgkzV:KaMaBDa+sJQTOqn1IaebujlJzV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771921875, "uuid": "3c9ece2e-af63-4f34-8706-280c3312f730", "value": 27103731, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921875, "uuid": "1260043a-91d4-4324-b0c7-325790c7c653", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31ef6c60-115b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771921880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921880, "uuid": "410384d5-bd17-4415-b04d-7b766f372f67", "comment": "Malware payload", "value": "5da93dd9411127cf05c033f3ddcec00c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921880, "uuid": "740cad0c-de4c-4983-9eda-932ea5c8e594", "comment": "Malware payload", "value": "70601674a699cb61e546b9931deb92e4733eedc50dac5d0adb88bc331749c3d8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921880, "uuid": "aba22d4c-f63e-4012-a119-3bd9d4c0381e", "value": "T14B060186BB01043BC0BB453245FA6762626B8C4AC9D27787B604B51C6D7B78C8F5EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921880, "uuid": "2cd14ce1-42bb-44ac-96ea-e991b548beda", "value": "98304:TiS7BQ+kIpmMp7118UFdQHipjdY1j6B0/orGVO:TiSVQ+zAubPvefO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771921880, "uuid": "3870324e-3c5b-4220-be5d-86b86f795947", "value": 3888615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921880, "uuid": "0010042c-04b0-4070-9b6f-28b29bb970a6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771922182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922182, "uuid": "5fe69bfc-84eb-4d9c-8a9b-58ae768d991b", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922182, "uuid": "85207944-c81a-40e5-bfdb-f2022eced7a5", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922182, "uuid": "df3f543a-e282-4a61-abc4-9b3cb9bf7a81", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922182, "uuid": "f92061ae-2370-46a0-b873-bad697eb03fe", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771922182, "uuid": "421ada31-f417-4455-b638-30bad44a11d7", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2be766f2-115c-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771922299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922299, "uuid": "fa20210c-b8ad-4336-acc1-41f3fa3e61b6", "comment": "Malware payload (ConnectWise)", "value": "0c3134fb0bb238e95893ebc9b18a009e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922299, "uuid": "1891fd52-1a2d-48f7-b95b-fbc64a464691", "comment": "Malware payload (ConnectWise)", "value": "94255cce37d3a055f8c340d56a358aaf4a722205f7f19117ca5e1b7841d1659c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922299, "uuid": "4bc90b0c-3700-4713-ac0d-9e93a677d956", "value": "T13CE522313590C13AE2B2263DD83A92F15979BD64DB23858B97B47D1A7CB0D8017B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922299, "uuid": "9ad0b4b3-1543-420a-baee-f8e2a61f61a3", "value": "49152:qrGLq7FVsLBe+1GVxrKlsuwGenGwfZVkVjOi8ifyXfKVzhy1g:qrn/TYGVxz3GBwRVkGuyXOM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771922299, "uuid": "b15f2e0a-a4fb-4a1f-872b-0b24c882cac1", "value": 3063808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922299, "uuid": "00f85e7d-9624-4cfc-ac65-0d4d095f9939", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee10fa1f-115c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771922625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922625, "uuid": "c10752ee-7428-496d-b3db-f7fcd35a495b", "comment": "Malware payload (Mirai)", "value": "be71d64de8f1df3b47ca98e7efe7f1e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922625, "uuid": "fd18f97c-2db5-4612-af7a-b6adb98b6a97", "comment": "Malware payload (Mirai)", "value": "7fa9b757c1826b025acd45e359260397bb863dd82d6be5c557812538cd40bb23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922625, "uuid": "107f2a39-b0d8-49d4-81fa-635f2798394b", "value": "T138839D77E9265E50D09689B0B4F4CF351F63A1C082531EBA26E5C675A087E8CF502F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922625, "uuid": "ccda984c-eb4d-4fc7-afad-203b28c8b73e", "value": "1536:eaQiNhtHOfYmH1+NYTszsYKG5NX7Z9Z1kCi+zRtJEp:e0/HOf3wNYwzsfGv3Z1koVrEp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771922625, "uuid": "da40702c-c7dc-4ef4-8cf2-9cc55da7e27a", "value": 83528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922625, "uuid": "1edcd80d-59c1-4af5-a7c5-efdc4a0d8bd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af1d63bc-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "ceabc082-2ee4-4d93-a956-e7e6b79a4066", "comment": "Malware payload (Mirai)", "value": "5f47786af37c05ef9401e565d2e0bb9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "cdb8ed02-febb-466c-9e11-50d1cf068cee", "comment": "Malware payload (Mirai)", "value": "90f9ec250ed55d6f2e66b58251b34686e35282f17a0c16448b4c252a77294bf1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "059fefc2-28b1-47d3-9918-a615e2054e2a", "value": "T110132986FCC24A3FC2C013B9A66E5A4E3761E3E4D2CB76079E54577136C620F1D6AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "43312dc1-fc76-492e-8814-f1209f778e16", "value": "768:XG2/l2Q2SsD3pDi9ZbyE2hk4G+6ZQ+QVgOJUCmJdtBNCwfoOM:X3+SsDUJn2hPq8VgOdGP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "deca1574-591f-40be-a501-9e9f9370665d", "value": 42788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "395a5c9c-7504-4a4b-974f-ea99cdb544b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af1d80f3-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "63b5ff9c-2a1d-4162-bea6-7b76235c1e12", "comment": "Malware payload (Mirai)", "value": "0033941a9d0c13cc30f5c03a50802741", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "2cdb7b99-c3ab-47d0-aac8-6171a7df8089", "comment": "Malware payload (Mirai)", "value": "31af1db6566957107651b57ae90702ba49b78b856de9411e087cba570783db66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "73127a44-efdf-48ea-85de-71b6b1ce3b5b", "value": "T1BC83188BF801DD7EF80FD6B74463490EB930E3910A931A377767BD93AC721A54826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "915d82b5-7ee7-441a-8a33-8c0350166193", "value": "1536:XQOjxmw2V2xAYV8aSlslcjYAht8f489k0rTUhrIpu1HT7ot4O9I/nPaKD:XQO4QEpdht8fsnrCupQ9I/PaKD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "09d93bd3-4547-4d27-9b8e-0c0354c0d821", "value": 84956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "cc409edc-e73f-45ea-9378-1798ef24dd4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af22c0a8-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "f777c395-8374-4058-9597-aba8b623a9e9", "comment": "Malware payload (Mirai)", "value": "55dc8edc21764b7a6bb8d037d911eb50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "c011ab73-28f1-49c3-9867-82514b275af4", "comment": "Malware payload (Mirai)", "value": "a054d47438646000621ed894a537697cc3a223e0e09037186af29058619a031c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "9e72bcb0-9bfa-40af-abbb-5bd3693d6438", "value": "T163735B41B38C0D43D1971DB03A3F2BD6D7AFE9D122E4FA852A5F9B8691B1933054AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "6f961cd6-3543-4526-aab9-afcc4fac3313", "value": "1536:k3fm9vWGC9nCFwUzQz4ln7IHl+94tCy/fVD6t:IfmhxCMRkg7IF+7SDA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "c56563da-2dc4-4dbf-9886-f0ebcf54c622", "value": 75184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "a2d272d1-a0ed-4331-887f-345f3c6aae2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af230089-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "1b927042-9f89-466a-bf38-ca9269bed17f", "comment": "Malware payload (Mirai)", "value": "c8abb23cf00ca73a9ff9146b7bd63214", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "821de9d4-134e-4be1-9c38-2029ccdc0ed5", "comment": "Malware payload (Mirai)", "value": "73273d3ee85cacb37df66e5f4e6b7ffc295d89f6d3299a1046b4d5f115efa5d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "0d4e2747-075d-4be2-9097-08f53906019c", "value": "T1E8A3C509BF510EBBD8AFCC3709AD1B4228CD655722B93B797634C528B64B24F29D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "da44bd71-08ba-446e-84d1-a60ea9f4f2eb", "value": "1536:JxODm3pPRWNqq28QDSfIMFQfgAZ+0u8vZjemPT9ESKhC7q+r:J0DOpPRWu8ERZ+0u8vjhhq+r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "77588b35-5338-44dd-876c-ae7292f1be88", "value": 101188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "834ccff4-3378-4c7f-898d-7b2ba91e835e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af24788a-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "09798efd-2e7c-4be7-b1bf-32a4b3976a4d", "comment": "Malware payload (Mirai)", "value": "48a40ededa71c3858ee8a18868b50dfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "cdaa492f-86e8-45a6-8528-5f47811348ef", "comment": "Malware payload (Mirai)", "value": "67a192844d6163f6e800b49cfce6b9e4535f2cc1d184bb8a2271e8e47f4f268b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "81b85d5f-26fe-437a-a613-18d1453c6283", "value": "T147A3B44D7E318FBEFBEC823447B39A12A65927D533E1C585D2ADD2011E7024E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "cf5b0f23-ffde-4cef-8c19-e03e87404df2", "value": "1536:WpaZOuT/Q30SQXa1r3J62yqPy/RWLW0edmpwjejNY0:lZzTJa1rZ62yqPy/ULWzjejNP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "db124077-22d5-4dcc-8603-0808f89e9a1e", "value": 101188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "6c3e6cd2-9214-4629-8861-035130c4024f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af25abc8-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "fed3298e-cced-4de7-aa87-ac8f91f6708f", "comment": "Malware payload (Mirai)", "value": "b731972a270f9fc29d6824eb6d136977", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "21c3ce7a-e753-4063-be31-8c8111185355", "comment": "Malware payload (Mirai)", "value": "b52a90f501e21c8aa7dee2e6731444540d28531ee7f16fc8c721d01c72bbe48e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "fdfec453-0ec2-46e1-ba03-baf31e579d6b", "value": "T1A1733A17BA4080FEC899C43843BABA36DC7274FE1379725A17D8FE366D55E601E29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "266d7b43-1f9b-4e92-a1bf-83d85885b7f3", "value": "1536:DeuIZobGRRINkGIb/+w4HnC+8l8Anzcft:quIZzDIWGIf4HT8l8Azcft", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "a404b77c-27e2-45f6-941b-fc011deac04d", "value": 75600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "ee448150-827b-472e-9c93-a9af2e97d727", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af2b490d-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "8af21104-bbfb-4423-aeec-157f0a9449a4", "comment": "Malware payload (Mirai)", "value": "43aa3825585a899b15516bd1c9292298", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "e825bd27-1f14-4bed-8a69-5c4790aed7d7", "comment": "Malware payload (Mirai)", "value": "74f40b7acc8ebd923bbe74955aeb4a4beb11eeacecb910279d681723b35f3be0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "e91595bb-2107-47f2-aa14-019d0543f3df", "value": "T10E733B56FC814A23C6C1127BF76E468D3B2653E8E2EA72039E259F3133C751B0D6B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "a7b2aa1c-0e41-4eb0-a782-9ae77cb81204", "value": "1536:uB/VU93ilj19ZBpCO72Rbu1U+qhxp8f8vNL:uB/VBBpCO72RDRZNL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "8dac2d65-a1ab-4c8e-8e5e-8a56c9d507e6", "value": 79168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "e3337ee4-ffc3-431c-b5d2-95956528f2ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af2cb53b-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "1c3c39a8-e26f-4972-9e52-f046c9911186", "comment": "Malware payload (Mirai)", "value": "bad6772df378616cbf1b15253f936f3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "3339c455-4a24-4136-87a3-f493696214e9", "comment": "Malware payload (Mirai)", "value": "35db31b684204fb5ab4e91516622a8448039dded232b7e420c18f47aea8a61c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "468c999a-5f04-4f01-8912-3769ae4c85e9", "value": "T10783185AF8814B21D5C512BAFA1E164E331307FCE3DE72239E24AF7137CA51B0E6A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "016bf59f-20e1-4b53-a8f9-0162bb3aa797", "value": "1536:GpnQQmY6CpD2sAKv7isPtBBREZEfSHYMac6f3cIIhniT4Bi9gn7O45zYtY:4m0D2ym4EZCSHYMactW4Bi9gnS4V0Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "7b53ae54-776c-4cdc-8d02-a30716a7f6cf", "value": 87348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "467f94b9-6905-4265-9500-439cb4b46e4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af2fb4b7-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "825daf1c-6636-4b96-be9f-c79e42f58542", "comment": "Malware payload (Mirai)", "value": "3bb48fc1cdd913fea86739b7caffa85c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "9a85c5d6-d28c-491d-9e32-9f8efddd316a", "comment": "Malware payload (Mirai)", "value": "3d57b39e7598bf60e0e760dc631de1ea0af36cd63aed3baa20ff80f33c3faee4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "7d814562-841d-4c63-8908-d9b92826e58b", "value": "T1E2B3AEEBF64715A2C85243F013C79F8E3E232290AE57A4E76D1E267B15760DB1D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "92af796a-99ae-4bcc-9f20-23c976f417ae", "value": "1536:pkA9afIgfNMW3zC8aRGGTtJM/qrlpmxJ6nDgJu/LWW:6fIw3e8ZE3MYlphDgJuq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "1de14757-fd46-4d3a-9822-edc13fd4f4a3", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "62c32527-c0fc-4563-9974-6834e1ea6f79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af37757c-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "eb67cb6d-fcf8-475d-a5a5-cafe62498f40", "comment": "Malware payload (Mirai)", "value": "e49aec1d214b206b86dd5bf851eea356", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "55f05fa9-3cdc-4389-9a8a-63fa6f926699", "comment": "Malware payload (Mirai)", "value": "250fa7449ae94117d057ec0340ab0cbd2e29622fe0bb84a6da3e3f3521b890ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "78080762-f6a0-4a3e-a150-3e9e9b47cf11", "value": "T120F33A46F6418B13C0D61779BA9F420533239BA4E3DB73069928BFF43F8679A0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "0eed1c52-b493-48c0-a873-4b99a3ac01f6", "value": "3072:i2bmltnY4BRae/xGPZ06v/mYp+C9T6MjZHDjyoM/9Gc03:xbmltXRae/xGPd/z+cT6OZHDj1M/9l03", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928532, "uuid": "e1fc77f8-6312-4357-af65-7c7e4ddd7c07", "value": 159412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928532, "uuid": "7792606c-6483-4833-a0c6-2bcd2ff31879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0c00f99-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928535, "uuid": "3de42fbb-bd53-4b83-9d37-a8b671df16e3", "comment": "Malware payload (Mirai)", "value": "1e77ccf57a512fb5142f6ab938b567f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928535, "uuid": "82b5085b-56ed-46fe-87dd-cf422c2c2e08", "comment": "Malware payload (Mirai)", "value": "95008f5628cadb026b7a5af8a255741104144b580da651295b2b5a0da8719c5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928535, "uuid": "9faad8fd-56cf-404e-8a4b-7724398a0ab7", "value": "T148733985F987C6F2C4474830416BFB3FCB32D9A511A1DB0DDF5A9F35DA33602AA226", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928535, "uuid": "d42ee03f-ff66-4cd8-84ca-2b495badffc5", "value": "1536:Wt6dVFeGBV9ah2tYeQmP7uW2wORzBbkivom3aJeCdLNn:WtSjBnah2tYe3PrXORzBbVvHCdLN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928535, "uuid": "42317459-f3f3-4ad5-902c-58240a3a9ac3", "value": 74836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928535, "uuid": "33cf0624-da67-4adb-b9c8-bef7352a0018", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0c8497d-116a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771928535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928535, "uuid": "e50b68a6-808a-4c94-a551-6b834f40a086", "comment": "Malware payload (Mirai)", "value": "807c13f9cccf015d0cd77599e6da23ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928535, "uuid": "e1b4e3c0-966b-461f-a604-4c1f7f199dfc", "comment": "Malware payload (Mirai)", "value": "c68e5430c11fb21c764bb256e7c2a7fd1622894f18a5673a35beba00da36e879", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928535, "uuid": "f9da8533-e015-4847-9cc0-f7e769b0b5f1", "value": "T115639E16D82119A9C28685B471ECCE3A1B13E5C063837EF71A7AC375A067D9CF849F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928535, "uuid": "668ebcb0-f917-4394-b009-74fe54baced1", "value": "1536:daT/uMkOtg9iYv2ZKsT5Z7BPxznCI0sCp8udX:dWVkwgAYugsz9xznsxrdX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771928535, "uuid": "d8e3a99c-b39d-427d-8f10-1e91d35e79f6", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928535, "uuid": "8cedf700-a7a7-4ddf-ab87-1df7f4196d65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1771929497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929497, "uuid": "c1d8c67d-f5f8-41cb-9265-824a6a4fb064", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929497, "uuid": "0d078145-1e41-4848-b50c-230dc3f4bdfb", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929497, "uuid": "34332fcd-1927-4569-b817-f316b3c3a80e", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929497, "uuid": "269d91b9-c43d-4d73-9422-9149d0abb275", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771929497, "uuid": "57c8fc4b-269e-4332-9c05-94f0f5665518", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929497, "uuid": "84fcbf70-fb70-44c2-9670-991037164007", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dbf40e4-117b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771935724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935724, "uuid": "84ed130b-6f5e-41af-9605-478cab93439e", "comment": "Malware payload", "value": "277ca75773d0581e8d90a946110a1af9", "object_relation": "md5", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "XAgent", "colour": "#b723f3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935724, "uuid": "4981ebb3-7941-49c1-9e59-7f71d5e46314", "comment": "Malware payload", "value": "d571d2b12297d1a5bbe1056abe34c8cf34118876700fb275620ff0f06358385f", "object_relation": "sha256", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "XAgent", "colour": "#b723f3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771935724, "uuid": "e397559d-0e8d-4506-a44d-d39cd9b20565", "value": "T15A6833C3A36C7378DE5B94A3F0B94FC9D788B81A3524ED503891E9D6A06AF56C170F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771935724, "uuid": "ce75f2b4-bb57-4211-a6d8-b9b4402a5fa3", "value": "3145728:KBxZHioN6y4F7mJWfPVQQOzrc1nTfZo/EO+9wgd4Ydc:KBnHioNx4F5fPgzw1TfZGEO+9WYdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771935724, "uuid": "bd562753-0ddf-4c70-8efa-ce96c4e7dddf", "value": 142005091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771935724, "uuid": "408ba295-ad77-47c3-9145-cc445bd72a87", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8bb927b-0bf7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771936146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936146, "uuid": "2cf33df4-01a5-404d-9f40-94f80ca0e7ec", "comment": "Malware payload", "value": "cbd5ecbc88acacb3b714629d0bc1535c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936146, "uuid": "f7bad34a-f8ec-440c-b8de-3223ccde8be5", "comment": "Malware payload", "value": "e06dbe87f6cdcfc942f274c4d7883a5ebadf48b7d5eab2a9ef0e900783a8e915", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936146, "uuid": "d470f4e1-2f38-4312-9133-0658e68a68b3", "value": "T1640623137C85C139DC3218B1CC8F9EA51E386D707E524947B7A67E4ED9B1B809B273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936146, "uuid": "5225cd15-7166-4d63-83ae-9104388a1be8", "value": "49152:cZr3+qkejHzM+pq8kB3R4SKkyMZVJOdjLrx9gigzFUgudmWg7I0nS0azEHvD:i77o+pq88JXsL19gvGvk773FaIH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771936146, "uuid": "9fc822cd-e9c8-450d-b82f-4a294d08ac0c", "value": 3832320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936146, "uuid": "3d121bf7-74e1-4608-861d-a44cdf365914", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771936519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936519, "uuid": "5f80498e-124a-432e-bada-88093063e87b", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936519, "uuid": "b6d38dc3-771e-4729-a157-154211302c92", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936519, "uuid": "9235abfe-fc99-408c-984f-1d8f7cb7e445", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936519, "uuid": "a9f6c0ec-3440-43dc-acd0-c06e5e3398e7", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771936519, "uuid": "dd325aa3-b3f7-4b79-ae72-2c9c08c8f98a", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8c1db57-1183-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771939340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939340, "uuid": "b2709653-1a63-4479-861a-b589fc6b1397", "comment": "Malware payload (ConnectWise)", "value": "7b219757bed29517e6ea5961e4717c1e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939340, "uuid": "83c603df-7854-4188-a00a-3b450e7e2a16", "comment": "Malware payload (ConnectWise)", "value": "0d6ad4521c6e8d2d943d8cbcdf35342ee961943e4a8bffd31fa046df5e12e464", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939340, "uuid": "2dd0be23-55e8-4cf2-85e5-b8c26b4eba93", "value": "T18AD6232523FD401AF8F75B79FD3682A46D72BE64CF21C11E9228B90D2A74D4096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939340, "uuid": "4ab49ea8-1ca2-45c2-9c1b-56bcaf1c33ec", "value": "196608:ZWh0cGw2Wh0cG3Wh0cGmWh0cGaWh0cGmWh0cGjWh0cGh:ZWaccWaceWac9WacJWacLWacsWacY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771939340, "uuid": "a24e63c7-beac-4256-9d74-795b563874fc", "value": 13361152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939340, "uuid": "7e54a0aa-ed89-472c-a35e-27a390c17c2e", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88ced396-1184-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771939635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939635, "uuid": "5819a0bd-a770-4f04-90b9-51b6f2736cfd", "comment": "Malware payload (ConnectWise)", "value": "2c5b66787e0f14194c161a01a427b26c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939635, "uuid": "0868d106-b96e-4d86-bd21-fe1fb847c7ac", "comment": "Malware payload (ConnectWise)", "value": "49ad24edc2cc450cfaf8f0c8ea33d133b80e1c59d48990ed49993fbf559f5fa3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939635, "uuid": "fa436e92-b072-4c81-81f3-0be7db40b0ae", "value": "T1D6D6232523FD445AE8F75B79FD3682E46D72BE64CF22C11E5228B90D2934D8096723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939635, "uuid": "2af179ed-a40c-43a9-949f-c7980bbf4dbe", "value": "196608:uWh0cGw4Wh0cG1Wh0cGCWh0cGyWh0cGfWh0cGoWh0cG:uWacyWacMWac9Wac5WacCWacfWac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771939635, "uuid": "4ac14014-76d8-407f-95c7-c49447381cc1", "value": 13479936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939635, "uuid": "2e5379ab-7fb7-4e06-86bd-c06bf84032bd", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3c17e64-1186-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771940539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940539, "uuid": "38e7aeef-a6fc-49d7-b9ed-dbb36f68064c", "comment": "Malware payload", "value": "bd0a2e86702a71ea0f26fda141a7fbdf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940539, "uuid": "06b533be-b1e8-4025-b153-ff41cfd9fdc1", "comment": "Malware payload", "value": "febec422841a9d28a283695d6cd44d5044b02432a9615266ecfee17356c23f23", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940539, "uuid": "02d0d4e4-e746-4f8c-a981-0afdec23ffbd", "value": "T19B8308327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940539, "uuid": "96e420f7-8f21-4850-bc6f-37ec19b3473c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnFWalVN/:XEKltp9txAX/yr2pbFWoVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771940539, "uuid": "19057948-798b-4b75-afc9-53ac50f271a1", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940539, "uuid": "5ac33193-0a97-4e2d-97d7-7ecca79a7150", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1847d6a7-1187-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771940735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940735, "uuid": "0a31fdb8-3842-432d-a9a4-143582d1f51c", "comment": "Malware payload", "value": "5fa1c92bbacc946144a0f668e05cd724", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940735, "uuid": "ba21db18-3f50-4eb3-9f40-56c764c6053d", "comment": "Malware payload", "value": "17fd977ac77de40e3a40e7bfca4f2f0556c2098d07d38532e5719386112e8765", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940735, "uuid": "2a7e9c4e-ee02-4e93-8c2d-37353c5cac73", "value": "T1BC5385A157B448F5797F833B9E44A2149527E902CA0977E5F0F3D294748CEA60BE3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940735, "uuid": "6cfa240c-4f69-471c-b5ca-8ba00e80b0d5", "value": "1536:TjNclkI5ypez1nT8fdmZMp64wvSAIXuTVMrvC8w:TjNclkI0pdmZMp64wvSAIeTVMrvC8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771940735, "uuid": "a28f18cf-249d-49ff-8beb-1a35a836ca26", "value": 65945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940735, "uuid": "06f590ed-72b7-4365-bcc3-cdd74d954787", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa98c77-1188-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771941329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941329, "uuid": "da72c172-f91a-4dab-83a2-29e9747eb8fb", "comment": "Malware payload", "value": "a5b159c0d9d5bcac836b029f74011770", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941329, "uuid": "eb135cc0-6813-49ef-b2ab-49970a9a7c26", "comment": "Malware payload", "value": "ee7d1764e03f38cca165dea5263a27beccb5a423a46c80959394bf50c9aea60c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941329, "uuid": "7ec9931a-f976-47ac-a436-b648e7587393", "value": "T143423F2115C46033007AA18CD5AAAB4CFFC6810FD792CA05B6FC62EF6FF2DA1D9136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941329, "uuid": "327388c7-371f-4b85-ae64-e99a64eb354c", "value": "192:zBl1qSj1MlbMHekzhLUWq/lpEstjOkspjHo7PNs2:cSulbMHekzhLUWqwsB4k7PNs2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771941329, "uuid": "44ef0a07-a99c-4e89-9e5c-906ca53d729e", "value": 12943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941329, "uuid": "bed27d85-7451-47b2-8518-3a932f6c1f8b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f54205f0-1188-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771941535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941535, "uuid": "371eb180-f512-42a2-898b-6f4deff9ba5c", "comment": "Malware payload", "value": "e373c05d6c876bb33aa0e02d5b916ae5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941535, "uuid": "7e91835f-b395-471a-94f0-c9af77d27fd8", "comment": "Malware payload", "value": "a8a095529d7da1ed62a9343eb4ea3e3cea1ebb06b32ae1cdb211bfab671b2896", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941535, "uuid": "b69533ad-0cbe-4939-b871-f4664b2b4177", "value": "T159D6231262FC4125E5F71B3AEA7A96F01934BE34DA12C06F57143A0D2A72F80C9B67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941535, "uuid": "cccd6582-11da-4106-a3d6-24e455948ce3", "value": "393216:JT3dRx9foT3d0T3d4T3dTT3ddT3dUT3dy:N3dRrQ3d83dg3d/3dx3dc3dy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771941535, "uuid": "1871fed9-5c8e-43fb-9a11-92b478851f2e", "value": 13418496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941535, "uuid": "25c8af20-f16e-4025-9688-ef81aabc2535", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e4da8e8-1189-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771941657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941657, "uuid": "43a4c5d7-e906-42fe-81f4-47f8c3d8510a", "comment": "Malware payload (Mirai)", "value": "c35bbc41168c85790b271e02c0bd8a58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941657, "uuid": "1100cb1e-3dcd-46cc-b087-ead864e4026c", "comment": "Malware payload (Mirai)", "value": "974cd07a7bb870325b90d27ba3b03f9bbfec1eca436002b8a85b4f3980bc6611", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941657, "uuid": "ea7da4e8-f667-48ca-9ee1-fbdfdeef3267", "value": "T10DE32756FD819B05D5D126BAFB5E928A33231BBCE3EE7112DD205B2123CA55F0F3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941657, "uuid": "a46b4be4-9842-449b-8e23-154753453da9", "value": "3072:hldCPZuDN90pOo7R2sZraK6nktbfV9GGT8EZNudOtPb2KqQA:hUQ9IOoN2uraKKktbfV9T8EqdePb2KHA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771941657, "uuid": "008ac929-9fb6-4241-a2e6-dc0d0e80c935", "value": 149340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941657, "uuid": "32bb8492-7866-4a66-9c7a-107e76238939", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d527d22d-1169-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771942087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942087, "uuid": "1307f6d0-b5b2-444c-ae53-ba4a1c9601f2", "comment": "Malware payload", "value": "8782d77d648c911030d1a43d7a8244ff", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942087, "uuid": "e0afebb5-0001-477d-bca3-3f58b16695d7", "comment": "Malware payload", "value": "5362f526ae00723a93418a0e62d4d0b093fe55ef9b41417d06b857153f1668af", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942087, "uuid": "61fdde8a-d8e1-4f80-bcc6-730816c989d7", "value": "T1F9B533F0980BADD92E3B2584E4B13128FD459997E1FA642DF907B9F46CC9438DA7C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942087, "uuid": "52cdfcfc-68d9-4df5-ac81-2c528ab02524", "value": "49152:8A3C2JyJiuj0gtd7D5188bLtUqh9ScxrkX:8QFcXj0gP7l1Fircxr6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771942087, "uuid": "3570fd3e-6331-4cbd-87b3-13744204822f", "value": 2340935, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942087, "uuid": "38a174ec-e369-42dc-a29f-c8bf060c975f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fee4466-118a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771942090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942090, "uuid": "d1e3ecb7-b3fc-45cc-bb57-d8179cdb370a", "comment": "Malware payload", "value": "1a8702544b1ef506353bbebcc44b68f9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942090, "uuid": "3db9cfc1-747f-4936-83c1-927c10b46145", "comment": "Malware payload", "value": "885873aa26f6d767c997d38b19ba0bbf45d5065be518b0d2721d97ecbd068b7e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942090, "uuid": "ec7101ff-c471-4c89-9180-bd67bf0af957", "value": "T1CCE4AFB65355AC9F0A1C0E75F4080B4B1D6848D7E6B8D2F87A82B4F887761A40EFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942090, "uuid": "5f5596b8-5e6f-4402-91c7-d438e67cf453", "value": "12288:AZd0KtLQuaOQZazsdd/jcPhAz7wTiv+o9KHZbmmnBiMg4DkfT3qlWkJVo:AcKBEZcsd9YPNev+oc8mBiMg/fTalWMq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771942090, "uuid": "cad40502-72e8-4c88-a6af-ad3fb6ceb9fd", "value": 706702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942090, "uuid": "097e5255-a1b2-4939-8a83-615d4b31aa92", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31f7e5e2-118b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771942496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942496, "uuid": "2780c6cb-8680-472f-af2f-f96e79edad35", "comment": "Malware payload", "value": "78e5b7d1dc29bfe256f8c29fec1f555d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942496, "uuid": "fd3b9751-1bf2-429d-9cc6-1687a6eccfe9", "comment": "Malware payload", "value": "0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942496, "uuid": "35025146-5cb2-41fc-ad09-f006a2cd9241", "value": "T129E0CD48B135F7735571D3A95E82D55876F542116F163D0CC1F3049FDC52475B22CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942496, "uuid": "8866ed89-dedb-4a26-a004-4e47fa7abd3d", "value": "6:SrusxtbZxLlmWkFbJZbXLWBL2eeutJBC+n:Ou+tbf57kJnbXaAeeutDC+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771942496, "uuid": "3f796bbf-b17e-43a7-8da6-b7a43d89b310", "value": 299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942496, "uuid": "e819afb3-aa31-4972-9c96-166e8bd568fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6353b18f-118b-11f1-8369-82aee05be84a", "comment": "Malware payload (Melofee)", "timestamp": 1771942578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942578, "uuid": "1bea6cc1-a578-4d2a-814e-c7b8513d284f", "comment": "Malware payload (Melofee)", "value": "779f4dfdba4c24bd4a084d757b1039f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942578, "uuid": "902cb7fc-4c7b-4451-9806-94668132fd36", "comment": "Malware payload (Melofee)", "value": "d67259690bd1440effa0e42ccb143055bdb3d4daf51db85b740449db1fd3c155", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942578, "uuid": "7b898f91-2cab-4d8d-9452-391dbbbd7051", "value": "T1BA458E5AB2F374FDC067C030835BDB626835F46541326E7B71C4DA352EA2EA01B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942578, "uuid": "f5b384d0-dd64-4b88-aeb3-dd85779cdca9", "value": "12288:d810mRPhEIQYNLlml9rKD0nWxRdRa0u3smyJrTBwRPDw5khSgJ8CWh:dO0mRPhEIhRi9rKD0WxRI6hADLLJ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771942578, "uuid": "8142f577-9b61-4790-8737-6b3115558a03", "value": 1173144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942578, "uuid": "f32068d7-2cdc-4500-81aa-337bcd999f67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa3957c6-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (AdaptixC2)", "timestamp": 1771942798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942798, "uuid": "3e55897d-61fe-49a3-a439-172543a219dd", "comment": "Malware payload (AdaptixC2)", "value": "db9d6f2434e960b380c4a6073cb85b24", "object_relation": "md5", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942798, "uuid": "95501598-b9e2-49f0-8734-f40df05c22d2", "comment": "Malware payload (AdaptixC2)", "value": "0e7d48636d29a59361c13d60dcc16aff14a0e0b16f8a1dd346825a8b139e0ef7", "object_relation": "sha256", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942798, "uuid": "c41e0c1e-504d-456a-9460-7fda597e303a", "value": "T14E834236E6B3C4ADC05BC634AB8394B7B9F07C5C463475194781A6223B5FE386BBE5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942798, "uuid": "c9ef7cd3-a6ce-445d-bbcc-fc6a39768bfd", "value": "6b133001594cf90aafbcc38997fd46e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942798, "uuid": "0cd21808-3f82-4530-a439-931c9d1eff27", "value": "1536:jv5DkpcQqa1hAGH2GAd/SUcNQI+fNbm1M4V5R1RHZljA6d0tp1OHFkkN:jv5DfSQ0RNTEJtpo2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771942798, "uuid": "01557f66-e18c-45b8-88f1-670a288b7c13", "value": 84992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942798, "uuid": "abfcd0f3-c637-42c5-9be8-45c05caa872b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1771945038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945038, "uuid": "a0dac920-bdf7-4b74-a5d1-321c71ac21bf", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945038, "uuid": "898841a5-a80b-4d6e-ba22-4d326f0a24e0", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945038, "uuid": "e10285ee-fb0e-4dae-84dc-dfa5000b0624", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945038, "uuid": "c6fabaa0-89ed-4f0e-8704-181d1c162b84", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771945038, "uuid": "c1941871-9222-4a0c-a32f-bed8b771dac7", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945038, "uuid": "621e4a0f-ed0e-4b17-a22e-e276329f8275", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945038, "uuid": "dcd08206-d2a8-47ca-a5a0-2dbb4a52edd0", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771945039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945039, "uuid": "76bd9ac5-94f9-4d07-9f8a-0a35a0c713db", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945039, "uuid": "76a3b691-cc50-4d58-adb0-9ee70e9dc606", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945039, "uuid": "7554d054-3053-4ac9-9efe-1d3126ba5349", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945039, "uuid": "bfab7b33-44dd-4b65-bea1-2f8630fcbad0", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771945039, "uuid": "3baf78ba-21e4-4efa-a333-e73d3a424d0f", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945039, "uuid": "7be2c077-376d-40b2-8bea-2e43f9d5990c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945039, "uuid": "3da7f716-d84c-4223-96e9-704ea40be5cf", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771945095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945095, "uuid": "5a2f95d8-7c2e-4108-8343-2d7edd2933f8", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945095, "uuid": "61ec2ba6-446f-4f96-b3cc-b4f8f02fc236", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945095, "uuid": "da71113f-de15-497e-b5c8-5841b7b4f637", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945095, "uuid": "c08913c4-fcd6-4cf7-9ec9-68138b016dbc", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771945095, "uuid": "a16ce602-c1ef-49cd-8965-19985e2da019", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945095, "uuid": "55e31d10-45dc-44c5-b8a9-75167aef1007", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945095, "uuid": "afc51ab3-c9b4-4c9a-a9aa-916c302872a3", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12138631-0e31-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771946947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946947, "uuid": "b88b0b89-c3bb-4eab-8f56-74766b12dd8d", "comment": "Malware payload", "value": "d36cd55c85ed93a9946d5f7bdcd6e4d2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946947, "uuid": "a9fb0259-da6a-401e-8972-c83b3cbfbb98", "comment": "Malware payload", "value": "8f5a2b047d41915a06c648148a1e96eb4bc9a888b9b57b61dd05c9eca16fe119", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946947, "uuid": "c06771f3-a3d4-4c9b-ac6e-2e1201291684", "value": "T160B5CF765207BCFADB675E7CD1022A710C887C671B2185CCBACA07CAA1D558CDFB98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946947, "uuid": "6ab9f7d2-71c0-49e6-9e19-ad3c13e5b386", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGN3eOfh11YYGBY:8UixbItdTrJoFVPMvXGNHi5c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771946947, "uuid": "7853cc70-924a-4e25-ae7f-e1f193e43b88", "value": 2384048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946947, "uuid": "1249f696-f033-428a-939b-71241b294fd3", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c359e48d-9530-11f0-91a8-82aee05be84a", "comment": "Malware payload", "timestamp": 1771947010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947010, "uuid": "d401ed28-49d4-4e17-a810-2499ad47ccb4", "comment": "Malware payload", "value": "8e7a0ed78cbac68fed28496348576ab9", "object_relation": "md5", "Tag": [ { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "python-payload", "colour": "#6A3603", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false }, { "name": "xor", "colour": "#ae2034", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947010, "uuid": "8a951a21-006c-4594-948d-72fa1174600c", "comment": "Malware payload", "value": "06c9d67ad7d9d11e12b2f167cc22e1ea538df4b28f85fc6e00c36e9bcdaec043", "object_relation": "sha256", "Tag": [ { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "python-payload", "colour": "#6A3603", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false }, { "name": "xor", "colour": "#ae2034", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947010, "uuid": "72794d82-94ca-40f1-9c10-210afeb0794c", "value": "T18FB633D3D4F7040BF923FA75C250D95D267C4785FA1CA0EF881842E6BCA4588AE6DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947010, "uuid": "e5ca5c92-e2cc-4b95-9e7d-788e174aff5c", "value": "196608:RvKpZlfHaLfUQMGveaMckIWFWqQ7GQMElfE1xc8KtBrJD4L:9KpDHabUQf2lckISW1hxNtsL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771947010, "uuid": "7e367bd3-10cc-4761-82e7-34a064d79010", "value": 10652571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947010, "uuid": "7225ca64-946e-4c75-961f-8dae615214ab", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b89a22c2-1195-11f1-8369-82aee05be84a", "comment": "Malware payload (STRRAT)", "timestamp": 1771947017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947017, "uuid": "94daf5cf-31f3-4710-9370-ff78b0d23939", "comment": "Malware payload (STRRAT)", "value": "201335ec3d0506fe45a5f793f9190fb6", "object_relation": "md5", "Tag": [ { "name": "strrat", "colour": "#235bed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947017, "uuid": "68327ac8-041c-4767-a32e-e897df3b0249", "comment": "Malware payload (STRRAT)", "value": "1c07c3eff0efd95822fe3db3878093b225d459022ebc2625574c33d84113d15b", "object_relation": "sha256", "Tag": [ { "name": "strrat", "colour": "#235bed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947017, "uuid": "9870c005-dd6c-4337-b8b0-08a3b00cedf4", "value": "T19FF4F1214B841FA4DEA85A0BD0BD4A1E57F1078BC619B4DDEB23BD07AFEFD04411A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947017, "uuid": "9704ba9f-236d-489b-98e4-b959eadd415d", "value": "12288:Jj4KmImYEs938FFchbJ0xIziezWVCE1LRzOVGJcgNiMQJ:aKmL4meieI9nNiM2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771947017, "uuid": "9f95b66b-141d-4a59-9465-aff589786804", "value": 783771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947017, "uuid": "b0577bdc-12e7-4290-ae16-3e86af70be87", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89b39461-10f2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771947017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947017, "uuid": "76281639-16da-45a1-8cb6-90c5d6852512", "comment": "Malware payload", "value": "a9b098a040884921cb2c0bea3b3c3476", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947017, "uuid": "a6464a38-cfd6-4628-8b93-a38074a459e5", "comment": "Malware payload", "value": "b25476b49b9cadc2e1d411611c7d0604a90fd375a597d12c635ae5ce1ed4406c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947017, "uuid": "1e1338b8-ca7b-4b5c-a951-23510ad4e871", "value": "T1EA073352856EE8C2CC72A37839F6DB06A51FE59513726B4F1F3BE6986CAD081430B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947017, "uuid": "20fb71e3-2c5b-4dec-8ce9-e41b5a70d72c", "value": "393216:BXmcBVFq2lCklve8n2DfkkY3ucN6ON2LcIugmgnhWZf3T18OR:oc9q2lGfDfkNuc8/ZugmghC76OR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771947017, "uuid": "0f957c03-8c2f-421e-bee9-f96cdb7ef6e3", "value": 17577801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947017, "uuid": "c267bc7e-b759-40c7-b9a8-5ad813253ab0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba3acc1d-1195-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1771947019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947019, "uuid": "dc7fceec-0df8-46d5-a9a1-40c829c296e8", "comment": "Malware payload (RemcosRAT)", "value": "27cc1527c17170c993f72a5e3ad98d1f", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947019, "uuid": "e5d16d8d-65cb-4445-ab34-7cb6d244da13", "comment": "Malware payload (RemcosRAT)", "value": "bf7ae0f87268a3fce13ca4dafe95ecac5971e8556c26678d05f0fa9b60110760", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947019, "uuid": "8ebe56b9-52b6-492f-b8b3-7c3b4d4d7b0d", "value": "T10BD4BFB95394AC8F0F1D0E66F50C174A1C6948C7E6BCC2B87A82B4F845661A48FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947019, "uuid": "7036565a-61f3-4509-a1fe-0735ac6857cf", "value": "12288:5CjYJ8cdHKMkerLQSK4UQkEF++c+3gv8H7lZEmW1Xlx8:vSYHKfELQSKMkU++c+wiJZEmW9X8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771947019, "uuid": "c8287546-31af-44c3-8799-c45f522ef27b", "value": 641027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947019, "uuid": "787c0ee6-6e08-4907-88fe-ee115c27a10c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c76ad777-1195-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771947041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947041, "uuid": "859a232f-05ab-42ce-b05e-2ae2cad179a0", "comment": "Malware payload", "value": "b081369a88177ae4fc5465e7fadb0fa6", "object_relation": "md5", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947041, "uuid": "c44672a1-3a42-4fa9-9800-d6b9a1f97c75", "comment": "Malware payload", "value": "8d5579331ebdf38064718433c83b60b51051fc506bdb105ad3b8b6cd04708bf7", "object_relation": "sha256", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947041, "uuid": "957eabe6-83e0-4d0c-a309-8cec6fd7b519", "value": "T1902833336EEDDFF668194C0AEE84B04DA20138ACB59C5E9EDD9D5AF6000E21755F98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947041, "uuid": "e49e27b8-38ed-4158-98bb-efaca6a7c4a2", "value": "1572864:oEg6kEQNpswEIYP0mFf7nuA+cjfVTgp8faGkK1d+SWLVwL/S8AqASIzMOBTKCuZZ:G1EQNpsJ9f7+aOpar1j0mAjDGZZph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771947041, "uuid": "0a0ab7fb-0057-4665-b6d1-8211a66e569f", "value": 98818154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947041, "uuid": "b3a0fbfb-8d07-4f61-a011-96520fd20234", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79bbd2a1-1198-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771948200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948200, "uuid": "b3c7aaf2-d580-4a69-b6dd-e84ee71721d6", "comment": "Malware payload", "value": "210eef6e61e31434432af24886bdc4c4", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948200, "uuid": "c04c8704-6e7d-4b2c-b8e4-5f88f30daaa3", "comment": "Malware payload", "value": "f7c0fa71262a275d264399318021997cf7bf68593cb71e487ab40739db5dee45", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948200, "uuid": "1de7a006-a448-4d28-80f4-e15e86740322", "value": "T113568DD0050507C6F5D80E95E4D7A29F86F8A13D413936A6BBB0B6EA4EA1EC6C13C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948200, "uuid": "1253664a-c9c3-4c42-a879-4823d56ed4cf", "value": "1536:POeXbemKL1emYRwawvvic3K+YCa92dc8HkLrCc3wvEQGs+YGEpmc9+G+C+Ww0rid:F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771948200, "uuid": "be9674b0-a6b9-455c-8dd2-106003ffdf39", "value": 6345486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948200, "uuid": "9c4c6069-2c09-4b48-81e4-ae9154821c7f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb13338a-1198-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771948336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948336, "uuid": "0426e6b5-1f39-46a1-ba62-cf77ad257f25", "comment": "Malware payload", "value": "99e061243df81ed2ffef8614b74cba36", "object_relation": "md5", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948336, "uuid": "9a0aa51d-fc4b-422a-a0ba-0c52929dbe4c", "comment": "Malware payload", "value": "24c778c57d8ecb9e3190a7140703dd709aa485398aae5b8e0b9f6552fe62284d", "object_relation": "sha256", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948336, "uuid": "d9ef3b5c-1f67-4282-803d-d9848f6fe7e7", "value": "T10AC533285C8BED3AED008F78793D1A78341BCD0F2794F25AEA195B17910A4DED78F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948336, "uuid": "b8c2ff3f-11e7-41ba-995c-5e4146f5d3b9", "value": "a50e815adb2cfe3e58d388c791946db8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948336, "uuid": "c74f0793-1c06-4356-ac21-b5d75047595f", "value": "49152:avetHxRncDwewF2A5YYsFNU8UpMz3C1KAUV3p36bpWWC3EWfizmlb:wQjncsHF2A5wfUpToAigzuEWfi0b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771948336, "uuid": "b0b293b4-0f7e-427a-8bb2-13fac80c1b75", "value": 2634752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948336, "uuid": "039eb085-33c6-43ba-89b9-96e84426a675", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbdc2c1e-1199-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771948740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948740, "uuid": "aef46d7b-70d9-4cad-bfb2-2336897b331d", "comment": "Malware payload", "value": "8fccde09ce68edcff4d7bef76129d736", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948740, "uuid": "acbb6014-a4ca-4f10-8523-e7ac82d58b26", "comment": "Malware payload", "value": "8c217ef731d2be8021f5f5006514e46e32486ac38a5650dba0758b01ee4b2805", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948740, "uuid": "d19f01bd-bf51-4fe3-a334-c27d320af6ad", "value": "T1DE340136E14FA5ABBF7ADFA26A5C308E29403F6550C59AD08F5FA350806E3C848C77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948740, "uuid": "9241649e-eb81-4e12-af02-0de61c064ef1", "value": "3072:mI7f/lC3nsgZmUxOLcPBH7sfE5srBLCEke/ytuxd3Ez2p3bZv7QIgNqFVhVWMSVh:bVssMtOA5sfP5kVIVEzGbmeZs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771948740, "uuid": "bbbc5cf9-cff5-41e7-9ca2-03570f28666e", "value": 247901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948740, "uuid": "fa23a5d2-3cb9-4713-83df-a45fe3146a10", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f05fab3-119a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771948987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948987, "uuid": "7cd45593-2408-4e7a-96fe-37ae62e69010", "comment": "Malware payload", "value": "1d13f1e1b1d332b1896d0c50e5447b2b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948987, "uuid": "9c4c1a2f-9510-4190-9047-e1789707dcca", "comment": "Malware payload", "value": "0a5d8401089ec07e6260a9544ef746f998b50b74469efb7c20a7f66b7160f904", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948987, "uuid": "9ae87844-5244-4e58-b5f4-32db25a0442f", "value": "T11E33945862F714318637E4B98BDFAA06763E0517B145DD60BAECA3901FC1E70A0F3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948987, "uuid": "ab562d6b-9362-4cd5-aaa9-445cddb64b5a", "value": "1536:AwCyL4sN8TUWi9AY1iofHaLVAKLY77wKUUSAAJZpNJFXIyjjPjUJ4ChMqk:pihXIyjjrUJ4R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771948987, "uuid": "d2248d39-3f99-4e48-bfaa-a51fbc500e87", "value": 54522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948987, "uuid": "d2986909-4103-4107-9ab2-763bafee6754", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "193f90fe-119c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771949756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949756, "uuid": "5ae5e80f-6af2-4a36-ae34-9929a9041754", "comment": "Malware payload", "value": "cfc288a6cc0c88a38f57481842a1af63", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949756, "uuid": "dee8ebe0-24d5-420a-a3d3-0a8cb601f18b", "comment": "Malware payload", "value": "142c75407982f4de54d3b2f879ee55e0ad0dbb87c8cca6f4b27ce4fa3aa4efc6", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949756, "uuid": "b54055f0-8d21-43f6-bcec-d9960ce08e29", "value": "T195C63348F57C481EEBB13E68531FDE290AFF48D476111A1583CB39854B8EA1ACA1DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949756, "uuid": "725937e9-f092-4e32-b2b7-108904cce8e9", "value": "196608:rdZx9KQqnp3v0HuOq1RKhoeiHi3nAXegIhV4wzQMZvWpPw7UIcOkVQhig59U2sxi:rOnp3eH3hPwu60vWK7irgLFs1Dt/WBoa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949756, "uuid": "e5057742-6980-4079-bce2-e4dcdd39f528", "value": 11666150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949756, "uuid": "d9ceb4f2-6a92-4416-a0cd-b59fb5030f96", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "441d7f85-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "238b3e3e-29bf-41f7-a7a0-9345fc87deb5", "comment": "Malware payload (Mirai)", "value": "040e2b16fd4c8892d6801185288bc6e1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "d80c0564-6679-4bc1-b4d3-817802a16bea", "comment": "Malware payload (Mirai)", "value": "af8696a4496b96f664ae27592a8cc50a8359f737d5b9d4341570411611e8bb58", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "519f84b9-1795-4ba1-87bf-bea02348569a", "value": "T1F60171A60EF5C473D95D9E8E7371C685507C6EC93CE41E2DB1C49EB38806614384BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "20d1a663-2240-411d-94b2-e797027381b8", "value": "6:IOnFfle6d213wd2UIay97Q635at+7Fb3tFDaJF5uI3Iaen3paNTP8e3a8aaeQ:kNSxy9BYg2djxgIaip3F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "114b0c1a-220f-4851-8800-9c57edc986e8", "value": 661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "a0b69514-d030-48d4-a913-3aca052e4c70", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "442dc354-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "e8b2f28d-af37-4b1f-b165-20d65bea79b2", "comment": "Malware payload (Mirai)", "value": "e7b2805f6541ef8b5f5657936835e963", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "4efae2ad-dc92-4d77-857b-eca09e600956", "comment": "Malware payload (Mirai)", "value": "f69861f86e4ae1c87d1c61ecc056963cb1ca3817be5ac16b3abfbb7da54039e2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "d7bef9fd-5be4-4cf0-ab8f-6f7fada6dc97", "value": "T1C6C31859FD819B11D5C526BEFE4F528A33135B6CE3EE7212DD146B2027CAA5B0F7A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "485de2a9-d7c5-4d2f-b71b-f9f659a0e1b8", "value": "3072:dtCUZcJfYUynJkSR+M+A1T9lABxGWa+Aa/wiabxqLs6plEtfPFdj:dtCxfXynJkSIM+S9C+Wa+Aa/wialqLsJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "046ec6a4-954f-4c61-a438-e1a7e28f0a87", "value": 121972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "132ae1e6-fcfc-4bf2-bd3f-f0c009e2a5ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44368172-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "3d2ce202-a850-476b-95ee-657d58186f37", "comment": "Malware payload (Mirai)", "value": "6931106c29506e0388885ca199a27ffc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "1d87d7ab-781d-4176-bdf2-719072d4aed9", "comment": "Malware payload (Mirai)", "value": "20b3bd5674be163ead915f6c5fc37bb920fb0ac5cbc9ca5f8c7e3c0fd65b1ad3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "af5392f0-14ae-4bcd-b65e-13ffa950cb44", "value": "T125F36C07B4C190FDC8D9C2B48FAEE126D972F45D2138B21F27D47E262E5EE202B5E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "5a18d54b-9dcf-406a-be61-2a0e21ea0e72", "value": "3072:7mw+Dhezejtvns3VZpufhIJrzPJl3LSp4MYB8I5:B3tvR3MPI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "747e3bf7-ef49-472c-82c2-9c15b1603ebf", "value": 165832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "177b5b37-06d1-4b90-929f-409cff31360f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4456876d-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "29cc30dc-03cf-44bd-b137-3cb22c9b6dc3", "comment": "Malware payload (Mirai)", "value": "a7be90bf7f767e52e0315acb5e7fdf79", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "205c5859-fb8c-425f-baf7-0709cf7f42aa", "comment": "Malware payload (Mirai)", "value": "195ed5e7fd690a33c75a688ccbc4746b752f536d34a219320cdc1463f3b37b29", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "48b700cc-4615-46d7-94fe-572e9f6e8fdf", "value": "T15CF3F745B8518B16C6C626BBFF4E42CD772A2768E3EE7203DD156B24378B45B0E3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "ec370736-152f-4825-bc64-080115a1c594", "value": "3072:3nAPwxbUbTILSE5l2EoB/IC97zil4hzP/en2WL1AZf58:3APwZUbTImul2EoB/IC972l4hz/en2st", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "db540530-9127-420e-be2b-f726d951079d", "value": 159960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "e8226d91-cb2b-4fb7-8bea-f306f4dac1f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "445a14f6-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "239f6f0c-d9b3-4174-91bf-1c2906133805", "comment": "Malware payload (Mirai)", "value": "a8d52b4ab8fb36593634357488421d9d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "685645d8-aa97-47a3-b3d2-1841dbf27f10", "comment": "Malware payload (Mirai)", "value": "fe7f47c1447e9d48014ef6c1853b06c94554b2f93185ad5e0a94d2da7086222e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "3bd27b98-3b04-42d9-9e52-5966b0ced304", "value": "T143F30845B8519B17C6C616BBFF4E42CC772A1798E2EE7203DD256F20378B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "fa28728f-7a0a-4e23-8b9d-cf13d3a3b765", "value": "3072:fSCPWcWUyXkClQLSOI/WvEh9gThn1453yXCGrMHZmlz:fHPW/UyXkCqLSOI/WvEh9g1n145iXCGV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "b63e67a1-9787-4054-ab8b-a14352f51396", "value": 164056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "91353f68-b908-4861-ba9f-cc2bdc991370", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446931da-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "bd5ee3f8-7c44-4fd0-a00e-65f94e4347b8", "comment": "Malware payload (Mirai)", "value": "4a072563f31f58f1ee50eacb02c947bf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "3b02e5e1-785d-41c5-96e4-c8cbe9195c01", "comment": "Malware payload (Mirai)", "value": "6c0622d1ef6def5dcb50a1b9ad6e6f50961856664a1688f1f9c3b59c28653a59", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "5bc36b94-57ae-4a42-b4d3-1ce653104113", "value": "T116A42A89EFD85B1BC29527BAFABA075FB3328A4577E7A115893012743FC27587B271", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "c264d2d6-bd6f-4f10-9239-4edc391b7f46", "value": "12288:OskO6Xq+AI14wlLoWwsN1aL8PHM92le+9hQ5N/1:OskOTZI14wlLoWR1Ujd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "33a69e97-f873-4b36-b9af-5a005594572c", "value": 458843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "30c8b0d0-6293-44d3-87e8-4bfe69eba63d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446a86b7-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "1cf0d835-934e-4353-aba0-656dac6e5292", "comment": "Malware payload (Mirai)", "value": "db0bd0515aca626527edafaf67774a95", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "4d7691ff-78eb-492d-8fe0-50445ce6eaa2", "comment": "Malware payload (Mirai)", "value": "62716ea1b599302bcf946b4930fb2d5f06528e6ad7c9f7ed09055780b91ca260", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "0029757c-4293-4674-be4e-7fe5c13ba97c", "value": "T1D024A65E6E228F7DF66CC73447F74A219B6D23D623E1D685D2ACC1101F2428E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "c9220b5c-980a-4b92-9bb3-644477e50dc7", "value": "3072:fTujpnDQO5/px5RLIAYUZakD+beqdoOTg130kA9dA11nGAT/3Xhx:rSJDP/pf1IEZam+yqJ0Ek8A99/3xx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "42c7a842-92fe-4f01-82b2-f878d3609063", "value": 221308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "d4048bf8-42f3-41f0-9f1a-d7348648697d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446af27d-119c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771949828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "9e1d0edd-cc5c-40c0-97a4-38b0b74639fa", "comment": "Malware payload (Mirai)", "value": "d2143753c9ad66b770f0307ff292c3c2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "5c32fb17-a69f-4401-a09e-b06f8f38e900", "comment": "Malware payload (Mirai)", "value": "5b88163b2691c06fe71c93a64f7ec9755ce44a0e318c3e9e23134e0f4c74d5ec", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "5a2ed16f-e3ec-44c6-aa3a-1db23352db83", "value": "T12524A40AAF510EBBDC6FDD3706E90A4635CCA41722A83B763674D528F54A50F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "2120e125-dded-4010-958e-183f4a3b917b", "value": "3072:I5pZ/kiJy74dMY3xqSSxMpIiBo1iXGkNxkahWA:I5pZ5y8MMxN6it1Uah", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771949828, "uuid": "a506a871-ded4-4da8-a8e4-e2cef263aed4", "value": 224636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949828, "uuid": "0d3246aa-a8e0-41d0-951a-1720d317895b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771951391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951391, "uuid": "31cebdd0-c41b-43e1-be11-d78c85297cba", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951391, "uuid": "cfd59d30-087d-4caf-8047-7cba2150bd17", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951391, "uuid": "6a7b6405-cd6f-4343-b4ae-99181ee9e3dd", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951391, "uuid": "00d46696-3438-43be-85e0-668b8ff94cb2", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771951391, "uuid": "9ee546bf-7cc4-4196-b096-176efc03a53c", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771951419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951419, "uuid": "45e31a56-d617-4206-9e98-2d83f9432a88", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951419, "uuid": "ab1a5292-8af3-41c2-99ae-9ac44ebe5a63", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951419, "uuid": "0e207589-989f-45d0-ad3c-a0d1922dec17", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951419, "uuid": "1b4b0a5d-7299-4ed5-b5b0-0c211b7e4c1e", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771951419, "uuid": "3f982b11-1dfc-4d0c-a158-897ba8017a4f", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25502357-11a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771951923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951923, "uuid": "f980b8ab-f629-4585-8268-539b0ec248d3", "comment": "Malware payload", "value": "62107eee1b93dc1be321d17f1c029ca9", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951923, "uuid": "7fa6a4da-a5c2-4da9-9a93-fb4382b60ba8", "comment": "Malware payload", "value": "22f03c40eb2599502cbc382dfe449e036f4b263f64e2cd0ccf40eecf69e68ed0", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951923, "uuid": "0cba259b-9f91-46e1-a422-5ea23582ea06", "value": "T1B576BCE704C7B9E6D4603FAD674F1F401519D8432D6283889FBA27F1E6BC756B3A90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951923, "uuid": "770bb897-98be-4d4b-bb31-45323ff80d77", "value": "384:X3hHBu44L2k1ajpgCDU8MFuI879FmSZRDwzN1lOP2XMQ:m3lOP2Xz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771951923, "uuid": "753e0fb2-fe2c-4577-8e54-67a1fd604375", "value": 7518010, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951923, "uuid": "66c36223-3963-4287-93cc-73d53f7415aa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "282ee5fe-11a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771951928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951928, "uuid": "1d7d1e0c-be38-4e87-b78f-7f2a1bb9122f", "comment": "Malware payload", "value": "603f51d8849db9a364c6419c329a02cc", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951928, "uuid": "05c68ad8-3cfc-44bc-9811-3570117548e6", "comment": "Malware payload", "value": "a68c500c9135976c8fb4ccc3e69ef8459c023dc03da79f3df46f40d77ad3ee0f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951928, "uuid": "da397455-a209-4606-b392-738a9ad3c670", "value": "T13BC31AFB1213ED9FCB270E68E44C1215EC6875ABF2D490A4FF04A7A14DE551C9CA8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951928, "uuid": "7a9a0898-27e0-4450-ad88-f9f7ccc9884d", "value": "1536:bTC3TXunFcAvAHMFiTk8MIVL5XIGhdB/7jwHOhZH+AmdSSwmkdwKQZLody9DlptO:bTQ+tAHMFiTk8FlXIGhXfwwSKGzg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771951928, "uuid": "455d44ca-a0df-4214-81ac-4e7e5962fa2c", "value": 122200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951928, "uuid": "df2a837b-12a8-4424-bfeb-22204b0f4bc5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ad7a020-11a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771951986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951986, "uuid": "0b3e6a22-2f09-40e0-ae9e-38970d0927f1", "comment": "Malware payload", "value": "3aaf21c7e39b21c98f7ee57ec6630beb", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951986, "uuid": "96c99251-62d3-4ce0-8ff1-f60f7a2bcff5", "comment": "Malware payload", "value": "d60850bf74baa62f2be40ae2ab6cd9eb20610e62440c1aa09f9e52b3da27800e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951986, "uuid": "ecb64959-cd55-4d23-95cd-6161f701c054", "value": "T1E53412F99F73A940D9D8FA871DB8588D52F74C2A6A311F875962F842432FDCC69223", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951986, "uuid": "071ba6b8-7e17-4554-bf11-f2e4044623b9", "value": "6144:IuS+vp8UzNa3VeAUnhfXFBQjQCaG2ejARFrl:1qUzNalGf1wKGErl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771951986, "uuid": "9bc24f19-c834-4735-8e9b-73c98199cd75", "value": 245312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951986, "uuid": "6d77d79f-9231-4b24-ba96-bcc497e5545b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f31071f-11a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771952047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952047, "uuid": "79abdbdb-1b06-4654-bbcd-6ee98e91a733", "comment": "Malware payload", "value": "3adae31d1110b29a9fa07049abe16299", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952047, "uuid": "b2194951-cdde-4ddf-8fea-2a4d179c1315", "comment": "Malware payload", "value": "b0c662acd8f1a0f5d08515841fad9ad9585101e6c2ff98ce0ac195c6e89cd7ae", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952047, "uuid": "94de6c2f-1a06-44ea-b404-08c3ac4a198f", "value": "T1546486FA6036ED8A86370E40E1043F179C299EDF66B847F8778815D1C19C68CADE75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952047, "uuid": "8a6fd5b3-ad38-4d34-8db5-717191f6b246", "value": "3072:S6EBJYmm2hpc0woGSkHGzv+rvTM7VHO4nM8vStmYyUKofdyfdAGpXk+dFDn3fDDB:Unm27Nb+rIVXHcjfdyfd7UIoTDb1CB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771952047, "uuid": "ab210d3c-7ed0-4b13-91a4-fa5eb483f1a2", "value": 320226, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952047, "uuid": "5bf3a600-f242-4c76-8a20-9d46ae315628", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c6379e2-10ae-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771952048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952048, "uuid": "80c4a59c-3cbb-4c78-8d56-c1a734320b9a", "comment": "Malware payload", "value": "a6f1f50267082ee60ecc487510e550be", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952048, "uuid": "a4fbdc2e-9060-4899-8c6a-dedde37e241d", "comment": "Malware payload", "value": "6b35d010b49c36d075c38db2d118e465c359b209b727937c89411d8432c721de", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952048, "uuid": "4cecc206-71a7-4af7-a4a6-a247567a1739", "value": "T17CF5333721E3BDC7B7324D51CC982E854CAA8857A365A136F6856F9E95E3800CE3D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952048, "uuid": "746e9d49-681c-4d2f-a783-5242de4bf18f", "value": "98304:TvAOjdkBVNoE9FRrz4BUdUUaQBlAs1up9:T7dkBVNN9FRcspaQfJ1up9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771952048, "uuid": "5ff3c12e-c623-4f5b-966c-51c1413d52f0", "value": 3355907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952048, "uuid": "a24ab08d-fcc4-447e-b401-879ca946c654", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23441c8d-11a2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771952349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952349, "uuid": "23961333-e6a2-4d3a-86a8-a9d2525b9c43", "comment": "Malware payload", "value": "1904f0826746b601fba05952fe14a977", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952349, "uuid": "ffd9a2c6-8fee-4a46-b771-8d6df9c56126", "comment": "Malware payload", "value": "44ec43706131caeabc9d1f4a5238716c0e7e7f97fb75a37ebfa2eb7771cc9384", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952349, "uuid": "fa47e1b5-7df9-451f-a4f0-859c0d1dab7b", "value": "T13E8412391AC67FDF0D68526815F33C195F204FE79CA9DADEED9039C0A1DBA680176C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952349, "uuid": "fe209cf1-a65f-4656-92ae-11b0623f4e6b", "value": "6144:GLViCbH/0TvRMC8vGPhOyGGSlme3zJ9SInq8dtXd2mFFkAN5JS+WcbRBXLnZQ9rY:HCT/2vKC8e0yGGSpfb/FCANiAl1K9rgt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771952349, "uuid": "766ea498-3ecb-40f0-9466-9347e9204c82", "value": 377680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952349, "uuid": "a1cb94e1-df33-40cc-9db7-b8992818e5c0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0803f108-11a5-11f1-8369-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1771953592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953592, "uuid": "ba6b506c-d506-4775-b07e-35b294deb495", "comment": "Malware payload (Amadey)", "value": "86bf33a76697c4f6daf329e55f92e9a5", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953592, "uuid": "b266380f-6161-4b7e-b3f6-600d253903dc", "comment": "Malware payload (Amadey)", "value": "9450c8f5fb17a1faf510d3ed6ce78430b103ce4e54474e5f50a53c5cf9b414d3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953592, "uuid": "e274bec7-2498-4fe7-aee9-4f05b3e5e749", "value": "T10C945B217916C032D66292711F79FFF185ADB8259F7109DB7BC00F7699202E26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953592, "uuid": "51c7742e-ae13-4eaf-b795-51d55078a78b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953592, "uuid": "163bc3b9-e20f-4ddd-9343-aec189a6ad4a", "value": "6144:TbzHF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fms4AOk:7HF0VKkWrb4QDwR4QWdyzsAlWZBR8qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771953592, "uuid": "4ccb598c-2d37-4e3a-bc31-c79c2e9ac398", "value": 443904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953592, "uuid": "e339e322-c597-485d-8372-199570618ed1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90006822-0f43-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771953612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953612, "uuid": "0acf2cab-2856-4d03-8e67-aef70cfa1514", "comment": "Malware payload", "value": "cbed8e21dc0c07068f86b1ba05e06d06", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953612, "uuid": "d40e8c4b-5370-48e4-806a-4ccf5559995e", "comment": "Malware payload", "value": "5f16ba61d384be881d409da5e63aa354c0869c3f11f5fe1386b6abb81cc45a41", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953612, "uuid": "6376c972-4f0a-4ee0-b3e4-7ad4f686bd64", "value": "T108A63378EAE22AD2E947D17D83378B55CA7C4C0C9947001A26F6B0497DBF9263CF4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953612, "uuid": "35ead140-3068-4c4c-a1ed-932be3acce09", "value": "196608:A3DmbAYSBXzkn/9obSXYOBdOT9kEPaXHenuBWppNur+:A3yUbBXzC6nOBdOTPSKpc+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771953612, "uuid": "1cd0dc1c-6896-4f73-a374-55d596c67fc2", "value": 9936896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953612, "uuid": "5370e7e6-7dbf-4d18-977e-18e46b669238", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4294efc3-11a9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771955408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955408, "uuid": "5005978f-c888-48a9-a14f-7d5914df602b", "comment": "Malware payload", "value": "6e020a1bc2afad0476624580cfb01a1a", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "portscan", "colour": "#75d076", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955408, "uuid": "e08d14d8-97a5-49c3-94fc-bbb5162b9998", "comment": "Malware payload", "value": "71ecdcb83b06494aed6b2b5805223d2a05a40ea345d58bd923c03b54e8c8039a", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "portscan", "colour": "#75d076", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771955408, "uuid": "dddf29b2-9ad6-414b-b659-fa213b52d043", "value": "T1799633031B08DAC901338E4C12788D2BD356357AAEA7EA9F32A5557C2B54BE3730F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771955408, "uuid": "f5347b4b-eca6-4c11-80e7-08200616a7b6", "value": "196608:Kn3sT9MsLRh10VVKwJkF/NkUHFdlOUKeQ3cpYHW1CkqKtDs8:cShQK3BOUAYmuDs8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771955408, "uuid": "bec2a287-c06d-4cf3-ba78-bad5c11cefc1", "value": 8698579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771955408, "uuid": "b8ec787e-5111-490f-b05a-197b144648b3", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1906061-7137-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1771956007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956007, "uuid": "27c4bba2-4eaa-49b6-ba89-1135adb93517", "comment": "Malware payload", "value": "947dbc2a6eccc8d859f64d07fccc42be", "object_relation": "md5", "Tag": [ { "name": "openssh", "colour": "#7694B9", "exportable": true, "hide_tag": false }, { "name": "pub", "colour": "#89B2AC", "exportable": true, "hide_tag": false }, { "name": "pubkey", "colour": "#F35083", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956007, "uuid": "f708aaa1-ba8c-42e3-9c2b-2de839db4df4", "comment": "Malware payload", "value": "32b44db3980a94e1be989a4c5605cb2b3ed2db6cfa208943c70ae2a82d983291", "object_relation": "sha256", "Tag": [ { "name": "openssh", "colour": "#7694B9", "exportable": true, "hide_tag": false }, { "name": "pub", "colour": "#89B2AC", "exportable": true, "hide_tag": false }, { "name": "pubkey", "colour": "#F35083", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771956007, "uuid": "c5669b16-795e-4b79-8f0f-833e1441895c", "value": "T11D01B53DFE02AEEB2C581EB284030E100CCEDD2A2D7576AB70AFB01960A0FA5A9114", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771956007, "uuid": "01db59c8-f52e-4a0c-b3fe-21294b35258e", "value": "12:4c1I8FiUAEBolySSj0YFzMrsgJ5qtNgtkicWmmkMR2gr3XW6GZwBhTngpvpp:RqrJlyH0YJJgJ5qjLLPMLGOBNEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771956007, "uuid": "fbce3e1f-9804-48d0-b207-c92c433480a8", "value": 762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771956007, "uuid": "ddef145a-90e1-4fe0-b455-7c75d3142c00", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90e4a3fb-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957687, "uuid": "2988faa0-e35a-43c8-ace7-a7e035bbfa9c", "comment": "Malware payload (ConnectWise)", "value": "cef22da88a4491ab2493b55b1f00bbcd", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957687, "uuid": "068ec6ec-4faf-4773-a81a-af5cd7508ac4", "comment": "Malware payload (ConnectWise)", "value": "80a8d08f5a0c00604488b98fc3191571788ef3453896e4a9b3f942239333330b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "24a3bdb6-d7e2-4cc5-a781-2e437c988f6e", "value": "T1EA646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "da04e230-8a90-4406-b323-5d441fd2e6d6", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "d3747542-cd60-44a2-87e4-924ad1f0af00", "value": "6144:CmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9d/:B1iw7gryNkSV1hy1Z1u2JLu9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957687, "uuid": "8ed2a27b-7469-46fd-b4ab-d27fc20fbce3", "value": 312528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "ca12a465-b5f3-4119-b7b2-d52faf0b4a50", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90fcd216-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957687, "uuid": "87541352-ccc3-47a6-9285-87f6d3b9af40", "comment": "Malware payload (ConnectWise)", "value": "2753e0caa3679af016c4598429ae89b6", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957687, "uuid": "ca51684d-7ec4-43e6-8526-b066705fca7a", "comment": "Malware payload (ConnectWise)", "value": "7ee1178ee63a34661bed83078dcaa3fb772dd671a4916b26e55eee7c047d4988", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "2297787d-51ab-4c85-b2ba-f71e8868413f", "value": "T134646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "f2dbd651-4435-4a94-9909-3f8e2dc2ea14", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "e257c941-503c-47d9-8fd6-fe7cc0570447", "value": "6144:amlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9y:p1iw7gryNkSV1hy1Z1u2JLu9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957687, "uuid": "aa2cdcb7-5e74-4316-bdb0-9368fc681cec", "value": 312536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957687, "uuid": "9e994ec1-ddb1-48d8-8997-2a482b5a22f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "911b10d9-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "9d0daf20-95be-4ae5-bf05-ce609f63662a", "comment": "Malware payload (ConnectWise)", "value": "74ade630e296f6cfcbd32c30a131d169", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "db8451c6-94f5-4767-b450-10b78226bcb7", "comment": "Malware payload (ConnectWise)", "value": "e75b9cc018d3d0a1556b4f671182a2f7830f9cb2bd163c486afc9ab1419ceed5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "8eb98478-1a94-42d6-92af-fa22e8f2d218", "value": "T1DF646D11B9C48432C673383147B4E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "63a06f71-e604-46fa-88c2-899930186415", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "44ea0e62-8d45-4028-8894-bb21f0369261", "value": "6144:qmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9m:Z1iw7gryNkSV1hy1Z1u2JLu9m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957688, "uuid": "e8112b45-40ff-4bc9-9e2f-f325ae8b9886", "value": 312520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "47c28a5f-7dfd-4d24-8a46-cbc0e7eb0a2a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "912b7ceb-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "64058889-78e1-4c1f-b2bc-948f448be478", "comment": "Malware payload (ConnectWise)", "value": "e8ec8483cdfc5f7a91e2a2f49a221aa8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "3f97e693-dd07-43ca-9784-5689a6eb7702", "comment": "Malware payload (ConnectWise)", "value": "1e4f7a9b0e296dfe3ef69cbc725803ab51d0b1e26ebc49d2f2bf6c9763d4799d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "3bd1221d-a940-4284-acce-55d1434455fa", "value": "T1B2647D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "b8ae3e6a-dbe6-4f8c-a4ba-d6c09b69ccb0", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "44a1b084-f21a-4c23-aab9-17263d327da6", "value": "6144:9mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9d:41iw7gryNkSV1hy1Z1u2JLu9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957688, "uuid": "c07d07c2-a8f4-4c4f-9c46-fd6263c78094", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "2f79e195-5b95-49e0-8179-358f5bcb4fbd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914a2b21-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "19522741-a4fc-4abd-b8aa-344c986eae93", "comment": "Malware payload (ConnectWise)", "value": "4ad3863d96b00284700be3da60c462ca", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "ac40368c-da1d-49d3-9ab0-4d2dfcc964f2", "comment": "Malware payload (ConnectWise)", "value": "8125a329cb019a6958a32c12f915f10a6b38353a73fb2b92ae389a96e1f0930f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "44a31e92-ba8c-46cc-a3d8-c8b79c32f711", "value": "T1E0647C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "e1a45339-4629-4b31-bd98-8b75813aa635", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "85024d92-9368-48a9-9cb7-1a2d787415a5", "value": "6144:6mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:J1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957688, "uuid": "bb04999a-b2ac-4462-878e-42c09a0f80e8", "value": 312568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957688, "uuid": "007aa598-4882-4a55-9c76-2738b18daf52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96f6601e-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957697, "uuid": "b1c2e7c8-6b20-4e6c-a3d7-e224376d09de", "comment": "Malware payload (ConnectWise)", "value": "231311ca7141e9eaac4d25bad9b23fe5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957697, "uuid": "72200182-c2a7-489a-b643-19cf371e8f3a", "comment": "Malware payload (ConnectWise)", "value": "a7b16c001f0cfa00e770798e609ff469bdc9405a5c064b6381be9a76b82d7e40", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957697, "uuid": "1794f8f6-295f-49ab-a70d-e0a38964c740", "value": "T170E61111EBA85537F0A25975B93660A394226C373911CD2D12EB752F2B37FB08D72E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957697, "uuid": "ed931411-7bd1-4971-a12a-ce9893619497", "value": "196608:nHxcp9ym3nltDUJVeHxcp9ym37Hxcp9ym3OHxcp9ym34Hxcp9ym3diDHxcp9ym36:RGplpJGpFGpcGpGGpdOGpd1Gpdd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957697, "uuid": "691942e0-08e3-42b6-a2fa-62d4e5cfa06b", "value": 14032896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957697, "uuid": "890bc977-f766-4ceb-acd7-7de4fcbf7c3d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97131372-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "ba6e0cde-abb4-4ae5-96b9-a75adad03b82", "comment": "Malware payload (ConnectWise)", "value": "2ca5382a4147ddd79dcef048bec679bd", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "66cc8f27-f268-4fbb-aec2-3f69f5a4f577", "comment": "Malware payload (ConnectWise)", "value": "57ec1ee95f2dba4c1811595b6d497edc16e413557693c6631aca1dbe9d5e06aa", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957698, "uuid": "0fd6d84e-c89a-40dc-9913-fe6aed71e252", "value": "T1BFD623116BF89278F0F22E39E876A0B1A5377D515E23D12E2324791E2875EC0C9A37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957698, "uuid": "577b25fb-1ba8-49f7-a3ee-d252463d911f", "value": "196608:hHxcp9ym3nltDUJVYHxcp9ym3+Hxcp9ym3DHxcp9ym38Hxcp9ym3qHxcp9ym3ZHS:TGplpzGpMGptGpaGp4GprGp9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957698, "uuid": "90791cc9-d1d4-43e7-b96a-ab15bb03cbad", "value": 13484032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957698, "uuid": "b542e2d8-ba23-4bbc-a637-097d985d8858", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9713ab36-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "ed24a5f6-cfec-46c3-9c16-e27b24178d2f", "comment": "Malware payload (ConnectWise)", "value": "330f9eae53d754168db6e2f79626d1b0", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "9598197f-4e34-4e9a-9f9d-e770fa9dccb0", "comment": "Malware payload (ConnectWise)", "value": "ed7a03ba6a4f0f21fec0e33a793279161d7b14b91550023c6fea61c49c307ce6", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957698, "uuid": "5960e3ba-95da-42c0-9bb4-ee460069ea6c", "value": "T1E2E623116BF89668F1F22A79E876A071A13B7C115E36D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957698, "uuid": "71ec1bed-a078-4f75-85db-2a9f05d33e2e", "value": "196608:gHxcp9ym3nltDUJVwHxcp9ym3PHxcp9ym3CHxcp9ym3lHxcp9ym330Hxcp9ym33p:OGplpjGpZGpQGpXGp3SGp3DGp30", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957698, "uuid": "eee3493d-2dc7-4997-a20e-bce35afcbce2", "value": 14725120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957698, "uuid": "fbbb0fbb-8940-49fe-bb67-646d28e8b67f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b23825-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957700, "uuid": "1fb76f07-1e71-4628-be55-fd1273ca0544", "comment": "Malware payload (ConnectWise)", "value": "a40968684a4ed413f1339afe33236f80", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957700, "uuid": "8a5afd78-0384-47b9-9343-79e7c06c313c", "comment": "Malware payload (ConnectWise)", "value": "3f44d050c0f41e0dd161f3335eb2ea5873efcc1517a75ca09129e6c6810386be", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957700, "uuid": "d3b5eccd-297d-4c5a-a016-b181555c9f1b", "value": "T1CED623116BF89278F0F22A35E876A0B1A5377D525E22D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957700, "uuid": "d6d0b017-7b06-457b-8f0f-3c816e4b78a4", "value": "196608:wHxcp9ym3nltDUJVRHxcp9ym33Hxcp9ym3hHxcp9ym3LHxcp9ym3tHxcp9ym3PHw:eGplpuGphGpTGpVGpfGpZGpf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957700, "uuid": "5e2089bf-e19d-4bef-879b-c5005088f102", "value": 13414400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957700, "uuid": "51eddf8b-01b5-4ba0-8003-5c98dccd4346", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99f18c64-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957702, "uuid": "2efcf602-fe39-4897-908b-48098fc71926", "comment": "Malware payload (ConnectWise)", "value": "1aa6be99e6e6b9992f3d53d4b3448f1f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957702, "uuid": "e1213fea-d981-4f37-aff6-22e8c91ab422", "comment": "Malware payload (ConnectWise)", "value": "061de33bfc91418d94f00ba839054d3f0714387915b71434038164e993d71587", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957702, "uuid": "38484a8a-cac2-424b-9a4f-de2fe9972b84", "value": "T1EBE623116BF89668F1F22A79E876A071A13B7C125D36D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957702, "uuid": "07e040fd-7f8a-4da1-b394-407e436c4925", "value": "196608:2Hxcp9ym3nltDUJV2Hxcp9ym3yHxcp9ym36Hxcp9ym3JHxcp9ym3LxHxcp9ym3L5:EGplplGpAGpIGpbGpLjGpL0GpLH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957702, "uuid": "2a55caa7-d069-4262-98d3-152c66ee02b1", "value": 14725120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957702, "uuid": "f1898a98-7d4a-47d6-8a10-32e7541e30cd", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b410ca8c-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "ee9deb87-4e30-4a0f-a178-4eb1df0e455e", "comment": "Malware payload (ConnectWise)", "value": "ba22197ca7c9a080e09e7b0fc9357dba", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "2675df75-7178-4b6c-9649-da31d2a756cb", "comment": "Malware payload (ConnectWise)", "value": "f32dd8d7f19e1fecee3822b50e3930395e612b0378e5ec7e708958e77af622fe", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "9d3ae81a-fc80-43e0-9bfb-c0dbac114a4e", "value": "T163647D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "83e51036-6643-42ee-a301-bdf7ce6c1784", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "f0b45856-43f3-4309-b42d-c104c380015d", "value": "6144:ymlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji99:R1iw7gryNkSV1hy1Z1u2JLu99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957746, "uuid": "e67c1f4f-e674-4eb1-a4ac-7dc724c421f0", "value": 312544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "83caf2da-c4ef-410a-8c69-e60a65287708", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b410fff3-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771957746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "94030b17-4efd-4b5c-a8f3-aaf1e9ea2c8d", "comment": "Malware payload (ConnectWise)", "value": "13673fc8fd880ad5a1fcd2f7b0198bae", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "213e5e3b-708b-43e1-a3f2-017392246a0e", "comment": "Malware payload (ConnectWise)", "value": "7fbe48260200f1585372843baecec20b1dfdd4549dddb7353a1493f76c22d5e8", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "123703a3-f366-47e0-b4df-9377784cda61", "value": "T1DE646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "4e507777-f285-4706-a935-40cf9c625485", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "3e2fff8f-7b3b-4779-8465-dd64ceb9f83c", "value": "6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9Y:51iw7gryNkSV1hy1Z1u2JLu9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771957746, "uuid": "ab3c89c8-034a-4d68-ac12-5368d3808362", "value": 312552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957746, "uuid": "be3feec8-fb43-44c4-bbd1-2be5dfba94dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6494fca7-11b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771961478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961478, "uuid": "e3a33e00-8a68-4efb-bda9-278856afb7ec", "comment": "Malware payload (Mirai)", "value": "e3a3a082c040a784d1d73b4d73df6cae", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961478, "uuid": "e58ac4e1-b477-45db-b482-4e6454069b1c", "comment": "Malware payload (Mirai)", "value": "c30838a9516acf254ba9c49309bf7dc3272ff9c397823b585d24e8002d4551b4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961478, "uuid": "33e718dd-2535-40a4-9711-e35223d7e328", "value": "T1F414E716AB510FFBCCABDD3706E90B0139CC655B22A43B3A3674D528F54B50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961478, "uuid": "2f94892d-4f7e-4aff-9a21-35143bc7264a", "value": "1536:TzJj39WGllgCHGc/JKz/aC7R+4YqofBUx4ez7Mv0JiOWU4+SJZGklEJ8GnTbHtXl:vJj39Wmu39zV7dBlWjJijnTRXlRBX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771961478, "uuid": "059d4083-5d36-4179-95fc-8309a887b7dc", "value": 194176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961478, "uuid": "8a417218-f753-414a-8498-3c3c5f125905", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e3816fa-11b5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771961769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961769, "uuid": "dfa2723f-c1ba-44f8-94dc-835a57f55b60", "comment": "Malware payload (Mirai)", "value": "a41403fa925685d86d2812e77b2d9598", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961769, "uuid": "f4f4e307-edbe-4b80-8ccc-f16603b0d1df", "comment": "Malware payload (Mirai)", "value": "e0ab6c69b5ea1198278f9729b61450b5d685ba7a5d897d244c91d89a8d3f61f5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961769, "uuid": "d5825bc1-00c0-47d2-8ee2-79e25409b187", "value": "T14FF30A46F8815B12D5D112BEFE1D128E37231BB8E2DE72029D245F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961769, "uuid": "ae871e7d-fcdd-4848-b6dc-0d935278d890", "value": "3072:nPofEf6Uq2XpZ9XsAqT34EacFJsJebAgAb4:ngfrJ2/9XsTT3xaaZAgAb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771961769, "uuid": "c79f5176-63a5-4fd0-90f4-3cfa23e215d6", "value": 157532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961769, "uuid": "de7343ee-c7f8-44a8-a8a3-6405c65e9fd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1b0665b-11b4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771962101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771962101, "uuid": "3f14f889-b87e-46e7-b0ad-99064c1c19a4", "comment": "Malware payload (Mirai)", "value": "cb9951b87ab7f677627db312295c640b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771962101, "uuid": "1126c61b-1c36-4282-80c4-97c9a14d7136", "comment": "Malware payload (Mirai)", "value": "580a7c2f12ea46d587ffbe0cdce44f330d2b936073b7337e04bf8af4e9bdd541", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962101, "uuid": "b95a8738-c62c-4998-a8a1-d99e9bf28502", "value": "T181E33A17B4C194FDC4DAC2744BAAF53AAD32B1991238B16B2BD4AB221E4DE305F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962101, "uuid": "b83263ff-5d57-41ec-b5e2-26f3b886f823", "value": "3072:vX4Fu4LJ25an63OJ6bgYZE6aNjaHTgtICu98yqIc1VXSY:vX4Fu4LJ25an63OJkMTGsLIrY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771962101, "uuid": "29eab3dd-06da-42fc-897c-a24018856f39", "value": 152232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962101, "uuid": "2acf7f14-31c0-4dcf-9d2d-2fe8b2197eca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81a3291d-11ba-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771962816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771962816, "uuid": "936bbbf1-bec9-47f3-9a7c-764c0f04bad7", "comment": "Malware payload (Mirai)", "value": "c41bd5ba20305717d8bd02232de50eaf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771962816, "uuid": "82f4a829-cf14-48da-a6f9-cebdbb71b052", "comment": "Malware payload (Mirai)", "value": "d27f1215ed03807a897ce323d19e3350e1374100a5d8022b0e267f01b35e98a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962816, "uuid": "a6cbdc63-31a1-40c2-91e7-16da3b79a347", "value": "T108B31917F6D2CEF6C08352702ACF9AA25C23F5FC1762711733AC6DA42B1D58A2D99E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962816, "uuid": "60500da9-7aff-4672-9f76-fb17acb542fa", "value": "3072:YowlDZRxCi08JsPO1G9phaUeDCDOlOmnduJXLBYZGSKe:axCVf9phaUeDCDOQmnduJXLBYZGSKe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771962816, "uuid": "760d8796-d2f2-413c-9b97-3be8511d771a", "value": 112456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962816, "uuid": "2f5e3ca2-e1d4-44aa-88ed-9ac1f89cd3ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b39ee1c-11b8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771963513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771963513, "uuid": "fb2e82e3-0d5c-47fc-a940-e40c09113246", "comment": "Malware payload (Mirai)", "value": "177b2d64dd2b6aea97fbc72f15b5d4fc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771963513, "uuid": "4c8e8061-6590-4ef1-8980-5b7e08370a08", "comment": "Malware payload (Mirai)", "value": "68085bc166b778410b1ba454e96b8c677a36bd4322d05fa5de1c14b4291d75aa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771963513, "uuid": "ee70246c-93b0-481c-9967-c2665313791a", "value": "T1A4E33B06731C0A07D1A32EB43A3F67E093FFAAC121E4F644655F9B8A9571E361486E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771963513, "uuid": "6560f8a9-34e5-4468-a92e-fe49110e2174", "value": "1536:t/ZfCj+Z9DasvIWkF3xfTIzEP9jg3hQoN7td4I/vAqjbzzuhdNpqOqkzhXqLR2:l3DsWkF3xoEFUH7j4Zqlm4L8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771963513, "uuid": "a78ea74f-6102-4b2d-8ac1-7c046a743426", "value": 146356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771963513, "uuid": "2b75f514-96e3-482c-b697-c3c52f89f226", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54b51874-11b4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771964487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771964487, "uuid": "cf611898-b8a1-4b2e-bebd-53d06bd63866", "comment": "Malware payload (Mirai)", "value": "94ef8c7cdfc515164de0ced6e59f2c42", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771964487, "uuid": "eaf350f7-c30f-43a4-b2bc-e2e34b55a219", "comment": "Malware payload (Mirai)", "value": "0c053145d14da86595383e84e9217d13cbe6da91a92b7950006a233c98ab52eb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771964487, "uuid": "b9c03284-90c2-478b-b431-ffbf665c1cdb", "value": "T1DD14A81E6E228F7DF668873547B74E259B5C23D627E1D640E2ACC2105F6028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771964487, "uuid": "7601aa45-0aad-44a3-b09d-61c558d51e38", "value": "3072:Vw2QX6d79AL2k0klZu0IBXShxwcaa5vRBBiO7pMd7Oi:y2kAxk0kNKXixT5PBiOqd7Oi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771964487, "uuid": "08960b51-8f4e-4132-bf67-c05527e5f32e", "value": 191008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771964487, "uuid": "366bd872-865b-4693-bbe2-e7ad671a039b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771891272, "uuid": "ee7c9134-1113-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.92.142:34793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771891634, "uuid": "c5e5aa5b-1114-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.61:37237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771891746, "uuid": "08c17146-1115-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-field-view.clearfield.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771891809, "uuid": "2e7b9901-1115-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.48:43694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771891934, "uuid": "7908eb68-1115-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.254.204:58243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892109, "uuid": "e13dc92f-1115-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-zone-monitor.clearfield.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892113, "uuid": "e3da78d5-1115-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.254.204:58243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892466, "uuid": "b5e867f1-1116-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:52374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892647, "uuid": "220be6f0-1117-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://field-logic-base.clearfield.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892650, "uuid": "23be9aa4-1117-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:46937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771892826, "uuid": "8caf6634-1117-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-clear-sync.clearfield.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771893008, "uuid": "f8fae629-1117-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:52374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771893071, "uuid": "1ea465cb-1118-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-grove-park.brightgrove.ru/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771893194, "uuid": "67bedb72-1118-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.48:43694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894089, "uuid": "7d69f01f-111a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/EGLlQNa.exe", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894096, "uuid": "815420e8-111a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.26.50:48126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894153, "uuid": "a37f7354-111a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.147.63:43608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894212, "uuid": "c67d419f-111a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.26.50:48126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771894574, "uuid": "9e4cbaeb-111b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.226.56:41758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895470, "uuid": "b45358e7-111d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.60:49914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895651, "uuid": "208776d0-111e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.147.63:43608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771895708, "uuid": "423fe88e-111e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.113.35:60216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896671, "uuid": "8030de99-1120-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.32:57581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896808, "uuid": "d2344bbf-1120-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.8:43204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771896908, "uuid": "0dd345a3-1121-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.60:49914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897154, "uuid": "a06ef78e-1121-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.168:42222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771897868, "uuid": "49b689b8-1123-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:48562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898054, "uuid": "b8621701-1123-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.154:53635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771898776, "uuid": "66df2097-1125-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.168:42222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899247, "uuid": "7f8cc654-1126-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.181:47633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899434, "uuid": "ef69358c-1126-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.159.177:43960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899546, "uuid": "31d69735-1127-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.181:47633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771899789, "uuid": "c29d8a23-1127-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.109:33285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900027, "uuid": "50a4e1a7-1128-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.42.142:33028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900267, "uuid": "dfeec6e5-1128-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.42.142:33028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900268, "uuid": "e061996c-1128-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.119:39491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900392, "uuid": "2a51995a-1129-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.22.179:54568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900754, "uuid": "022ef8fc-112a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.245.119:39491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900762, "uuid": "06c78e4d-112a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.133.179:40554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771900816, "uuid": "26b8afdf-112a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.170.137:49341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771901046, "uuid": "afc27cb5-112a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:54783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771901414, "uuid": "8b888f43-112b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.169.44:55398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771901654, "uuid": "1a44475c-112c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.211.17:36422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902010, "uuid": "eebf9e2f-112c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:54783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902315, "uuid": "a46c3594-112d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.148.18:39445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902315, "uuid": "a48cd9c1-112d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:33772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902316, "uuid": "a52d4353-112d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.170.137:49341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902614, "uuid": "56f0eb1e-112e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.211.17:36422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902620, "uuid": "5a1b0bdb-112e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.245.62:54152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771902914, "uuid": "099b65d1-112f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.15:37883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771903813, "uuid": "21301ee4-1131-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.190:42210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771903934, "uuid": "696026ab-1131-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.165.185:51598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771903936, "uuid": "6ad08e27-1131-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.182.19:37071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771904056, "uuid": "b22bc866-1131-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.120:34390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771904107, "uuid": "d07ab41c-1131-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7332146992/1jACLRw.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771904174, "uuid": "f84b6367-1131-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.15:37883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771904835, "uuid": "82c16bfe-1133-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.150.120:53378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771904947, "uuid": "c5188c08-1133-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.85:47634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771905129, "uuid": "317ee97f-1134-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.182.19:37071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771905129, "uuid": "31d6d8e5-1134-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.187.145:34952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771905546, "uuid": "2a1020ea-1135-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.190:42210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771905846, "uuid": "dce14839-1135-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.176.125:42328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771905971, "uuid": "279eec46-1136-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-grove-hub.brightgrove.ru/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771906207, "uuid": "b43c299c-1136-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.194.20.7:11550/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771906273, "uuid": "dbdaa6c4-1136-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.85:47634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771906445, "uuid": "42502ee2-1137-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:33559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771906509, "uuid": "684641cb-1137-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.187.145:34952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771906636, "uuid": "b3cda776-1137-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.16:41692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771907054, "uuid": "ad4f382c-1138-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.127:44554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771907474, "uuid": "a7678d2a-1139-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:35315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771907532, "uuid": "c9f32f04-1139-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.16:41692/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771907587, "uuid": "eb074269-1139-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://area-grove-sync.brightgrove.ru/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771907591, "uuid": "ed597071-1139-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.77.31:33626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771908019, "uuid": "ec894058-113a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.180.146:33568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771908072, "uuid": "0c27dca0-113b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.58.87:46022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771908073, "uuid": "0c428aa7-113b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.237.181:43733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771908431, "uuid": "e1c8dac8-113b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.13.180:46302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771908555, "uuid": "2b8084ea-113c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.14.131:47933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771908965, "uuid": "205de21c-113d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.127:44554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909146, "uuid": "8c4b976b-113d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://js0qnoh0.alphasync.digital/?=check&&actmn=fmDDhGuxkEXfSMZy", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909214, "uuid": "b482cdc8-113d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.77.31:33626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909215, "uuid": "b4e276e9-113d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.146.248:52193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909395, "uuid": "20b9c3db-113e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.66.24:38034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909513, "uuid": "66fbbc1f-113e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.14.131:47933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909629, "uuid": "abc93284-113e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-cliff-high.freshcliff.ru/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909633, "uuid": "ae73ceea-113e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.180.146:33568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909755, "uuid": "f7298f81-113e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.13.180:46302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909817, "uuid": "1bf62af1-113f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.146.248:52193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771909817, "uuid": "1bf62dc7-113f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.58.87:46022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771910050, "uuid": "a713ab50-113f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:46937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771910371, "uuid": "663c9a12-1140-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.228.197:38474/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771910710, "uuid": "3052e966-1141-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.89.41:60621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771911134, "uuid": "2d2f7922-1142-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.69.242:40072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771911190, "uuid": "4ea047c0-1142-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.213.215:36482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771911851, "uuid": "d8900715-1143-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.223.55:47259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771911914, "uuid": "fdbae0be-1143-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.8.190:38857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771912210, "uuid": "ae86b0c4-1144-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.89.41:60621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771912687, "uuid": "ca956c6d-1145-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.228:55576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771913071, "uuid": "af3e4d73-1146-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.29.142:17970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771913348, "uuid": "54e112ea-1147-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-fresh-node.freshcliff.ru/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771913357, "uuid": "59be4ed0-1147-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.8.190:38857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771913411, "uuid": "7a2e533f-1147-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.29.142:17970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771913838, "uuid": "78630fbd-1148-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:34561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771914070, "uuid": "02f2fbf4-1149-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.33.33:43127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771914310, "uuid": "91c4fd79-1149-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.228:55576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771914746, "uuid": "95f376be-114a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.32:57581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771914969, "uuid": "1aa51796-114b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://summit-cliff-sync.freshcliff.ru/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915161, "uuid": "8cfe9b8e-114b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.104.104:42493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915568, "uuid": "80072286-114c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearbreeze.clearatwind.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915579, "uuid": "86836e59-114c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.95.129:33915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915698, "uuid": "cd25712e-114c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.78/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771915759, "uuid": "f17d9979-114c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.142:45969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916057, "uuid": "a3417acb-114d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.33.33:43127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916110, "uuid": "c29a0f04-114d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://windglade.clearatwind.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916659, "uuid": "0a1c0f6d-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.55:50396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916888, "uuid": "92aeebb1-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://136.0.213.249/Bin/ScreenConnect.Client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916889, "uuid": "92f2fa02-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssagntroplexa.com/Bin/ScreenConnect.Client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916947, "uuid": "b5e613b9-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/t354454323432/refs/heads/main/Documento_6789789_pdf.cab", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916947, "uuid": "b5f15766-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/stevencohn8888-max/NEWOWNOW/raw/refs/heads/main/P0-678766887678.7z", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916947, "uuid": "b60da763-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/t354454323432/raw/refs/heads/main/Documento_6789789_pdf.cab/", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916948, "uuid": "b69ae768-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/stevencohn8888-max/t354454323432/raw/refs/heads/main/Documento_6789789_pdf.cab", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916949, "uuid": "b6ae9f82-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/stevencohn8888-max/6789098778909876/raw/refs/heads/main/Documento%236124.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916950, "uuid": "b7507536-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/NEWOWNOW/refs/heads/main/P0-678766887678.7z", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916950, "uuid": "b755ca02-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/NEWOWNOW/raw/refs/heads/main/P0-678766887678.7z/", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916950, "uuid": "b76ee5c7-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/GJH/raw/refs/heads/main/documento_pdf.7z/", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916950, "uuid": "b7737f98-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/stevencohn8888-max/GJH/raw/refs/heads/main/documento_pdf.7z", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916950, "uuid": "b7c97fe9-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/stevencohn8888-max/johnj/raw/refs/heads/main/Documento.iso", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916960, "uuid": "bdaf14c4-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.66.24:38034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916961, "uuid": "bde30a2a-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.139.61:55789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771916969, "uuid": "c2dc08cf-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:34561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917006, "uuid": "d8aae2b2-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:37273/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917006, "uuid": "d91a1f13-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.240.200:59078/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917006, "uuid": "d91b1b12-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.154.112:44084/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917007, "uuid": "d980a288-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.16:9021/1a2.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917007, "uuid": "d9a04096-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.77:28357/.i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917007, "uuid": "d9a0543a-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.235.118.107:1947/.i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917007, "uuid": "d9d3b16b-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.236.94:40442/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917009, "uuid": "da9453ad-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/GJH/refs/heads/main/documento_pdf.7z", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917009, "uuid": "daec27e9-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.229.228.126:4703/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db0efedf-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.72:55639/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db3b0f1b-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.91.66:50446/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db4b5f9c-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:40562/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db4e27b2-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.82.42:46531/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db5ceac1-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.72:55639/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db61c693-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.128.128.60:33487/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db663af3-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.82.42:46531/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db6e2273-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.117.6.227:3713/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917010, "uuid": "db9d5874-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.51.58.126:7603/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917011, "uuid": "dbb1bd84-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.38.58.242:8555/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917011, "uuid": "dbbb5ad7-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.190.252:50212/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917011, "uuid": "dbbb5b30-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.147.110:51376/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917011, "uuid": "dbc43b8f-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.190.252:50212/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917011, "uuid": "dbd79672-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.190.161:51012/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917011, "uuid": "dbdf0df0-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.190.161:51012/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917025, "uuid": "e48cda11-114f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.103.42:35099/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917085, "uuid": "08239532-1150-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.43:34613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917386, "uuid": "bb6b34f1-1150-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.142:45969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771917425, "uuid": "d2b71ca8-1150-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.39.218.69:8080/windows_backdoor.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918032, "uuid": "3c79e7af-1152-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:55462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918100, "uuid": "651f2c12-1152-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.104.104:42493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918282, "uuid": "d16320e3-1152-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.55:50396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918579, "uuid": "82c1e978-1153-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.252.222:47144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918695, "uuid": "c79a3e30-1153-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.43:34613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771918764, "uuid": "f09041aa-1153-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.45.147:53603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771919482, "uuid": "9ce52c3a-1155-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.40:33465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771919538, "uuid": "bddf1468-1155-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:50030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771919538, "uuid": "be588843-1155-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:55462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771919710, "uuid": "248f0647-1156-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://brighttail.brightforfox.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920247, "uuid": "6495c39d-1157-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.124.18.9/v", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920309, "uuid": "89b3a206-1157-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://emberpelt.brightforfox.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920551, "uuid": "19ea5405-1158-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kys.cx/get.php", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920563, "uuid": "20d37f8b-1158-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kys.li/get.php", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920619, "uuid": "424052d4-1158-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kys.li/get.php", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920626, "uuid": "4694a89e-1158-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kys.cx/get.php", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771920924, "uuid": "f860463d-1158-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.40:33465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921148, "uuid": "7d9fcdb1-1159-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://froststream.coldinriver.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921807, "uuid": "06730f54-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/mipsel", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921807, "uuid": "06732aaf-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921807, "uuid": "06a075e2-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/aarch64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921807, "uuid": "06b519d3-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/kal32", "Tag": [ { "name": "BillGates", "colour": "#8D0349", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921808, "uuid": "074254dc-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.201.180:7613/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921812, "uuid": "09c47a8d-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/linux", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921812, "uuid": "09cdd016-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/mips64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921813, "uuid": "0a09695d-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/386", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921813, "uuid": "0a1e6e93-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.251.133.225:18910/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921813, "uuid": "0a66917a-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921813, "uuid": "0a671221-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921814, "uuid": "0a99656e-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/kswpad", "Tag": [ { "name": "BillGates", "colour": "#8D0349", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921814, "uuid": "0abc3201-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/kal64", "Tag": [ { "name": "BillGates", "colour": "#8D0349", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921814, "uuid": "0aeb1cbe-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/mips64el", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921814, "uuid": "0b07c1e8-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921816, "uuid": "0c39a005-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.29:34265/s/amd64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921867, "uuid": "2a1a111e-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sahammbank.help/SOSTENER2.vbs", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921869, "uuid": "2bc6abfb-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tukprivate-uz.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921876, "uuid": "2f786139-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://encontros-portugal.com/apk/app.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921880, "uuid": "323955ee-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mehraasan.space/MehrAsan2.7.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771921932, "uuid": "5135605a-115b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://icetorrent.coldinriver.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922361, "uuid": "51099f12-115c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.54.243:37571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771922416, "uuid": "7164f750-115c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.95.129:33915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771923129, "uuid": "1aa49ee4-115e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://chillwater.coldinriver.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771923552, "uuid": "166e0678-115f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/21ihkB1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771924269, "uuid": "c22f9486-1160-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://swiftbranch.fastleaf.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771924569, "uuid": "74cef522-1161-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rapidfern.fastleaf.in.net/service/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771924636, "uuid": "9cbfd75e-1161-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.141.89:46888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771925112, "uuid": "b8762b11-1162-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickpetal.fastleaf.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771925289, "uuid": "221efdd4-1163-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://epi66tim.velocore.digital/?=check&&actmn=wsUuSdLFabxFwEvR", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771925831, "uuid": "64dacc43-1164-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.8.121:45035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771925851, "uuid": "70fc1775-1164-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.227.2.184:52677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771926069, "uuid": "f2b2e0d3-1164-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stonewild.wildandstone.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771926438, "uuid": "cecf024a-1165-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.8.241:40230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771926618, "uuid": "3a0d6672-1166-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.50.128:49488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771926858, "uuid": "c93069cc-1166-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.202.34:56193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771926920, "uuid": "ee56ad42-1166-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.22.179:54568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927449, "uuid": "29b1656b-1168-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rockgrove.wildandstone.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927460, "uuid": "2fc94710-1168-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.8.121:45035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927638, "uuid": "9a256ef3-1168-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:49997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927689, "uuid": "b8809503-1168-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.202.34:56193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927689, "uuid": "b8877d4f-1168-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.81.218:41192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927750, "uuid": "dcdb7f15-1168-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.50.128:49488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927817, "uuid": "04f592ab-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.235:39473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927817, "uuid": "04fe1c12-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.81.218:41192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927818, "uuid": "051eb914-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.82.145:51822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771927819, "uuid": "05c78619-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.199.196:56532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928166, "uuid": "d4c5ddde-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sahammbank.help/SOSTENER2.bat", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928167, "uuid": "d53cc73f-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://au72nuxzv2.ufs.sh/f/4LhV5B1sDCwIe0flItrPak1gmwHr84FvolV0K9Q3jZyqzfpR", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928226, "uuid": "f8c27738-1169-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sahammbank.help/SOSTENER2.js", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928359, "uuid": "4790f029-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.69.242:40072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928529, "uuid": "ad74d755-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928529, "uuid": "ad74e6fd-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928529, "uuid": "ad7590a2-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af2b0003-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af2b20be-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af2b4f88-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af2b51e7-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af2f2f17-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af30e235-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af372288-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af372d2e-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af38c158-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928532, "uuid": "af42c0ce-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928533, "uuid": "af903917-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.206.178:57430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928535, "uuid": "b0cd6857-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928535, "uuid": "b0d0973e-116a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928892, "uuid": "85d4c0a2-116b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.82.145:51822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771928957, "uuid": "ac6b30b7-116b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.141.89:46888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929247, "uuid": "59401643-116c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://vbb24wmu.lumenbit.digital/?=check&&actmn=VTlUMkJJfPNLYUix", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929377, "uuid": "a6cf1bba-116c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.49.105:35307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929498, "uuid": "ee9a6094-116c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:39512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929498, "uuid": "eea5ab5b-116c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.195.8:56290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929857, "uuid": "c4956ea9-116d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.206.178:57430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929911, "uuid": "e52cf7ad-116d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.232:34613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929968, "uuid": "06b953ac-116e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.69.231:40497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771929976, "uuid": "0be4dfff-116e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.170:60225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771930102, "uuid": "568a3921-116e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.148:41126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771930334, "uuid": "e0daf8c2-116e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.248:51075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771930627, "uuid": "8f765cb9-116f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2z0nkkls.lumenbit.digital/?=check&&actmn=WDIFGxQnsJnvHCPg", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931120, "uuid": "b590f120-1170-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.248:51075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931174, "uuid": "d571c718-1170-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.199.196:56532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931286, "uuid": "187d9d23-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.49.105:35307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931287, "uuid": "18fa1c33-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.151:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931294, "uuid": "1d54daa6-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.148:41126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931420, "uuid": "6886690d-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.59:35193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931481, "uuid": "8c83208e-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.170:60225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931539, "uuid": "af5fcb56-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.221.37:48028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931585, "uuid": "cab8b75c-1171-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ovfs585i.urbanforge.digital/?=check&&actmn=dkHXBtBxmiLHInXf", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771931838, "uuid": "61432ee7-1172-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.57.53:59084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771932007, "uuid": "c686986e-1172-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.232:34613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771932258, "uuid": "5b9146df-1173-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.19.154:37217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771932613, "uuid": "2f69ab36-1174-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.19.154:37217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771932911, "uuid": "e109ed10-1174-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.59:35193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771933160, "uuid": "753521d4-1175-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.101.191:36472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771933276, "uuid": "bab661fc-1175-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.23:36573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771933330, "uuid": "dae513b2-1175-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.91.154:42533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771933522, "uuid": "4d01e7f6-1176-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.178.94:57074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934239, "uuid": "f8749e63-1177-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.8.241:40230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934708, "uuid": "1022e587-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.184/", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934766, "uuid": "32aee013-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://easyhostweb.com/1.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934777, "uuid": "398d74f7-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.245:45446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934886, "uuid": "7a23168f-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://easyhostweb.com/1.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934900, "uuid": "828d9af3-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.91.154:42533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934909, "uuid": "883ae16f-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.230.198:36285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771934960, "uuid": "a676eb03-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.72.112:35787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935073, "uuid": "e99d0743-1179-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:34795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935131, "uuid": "0c82d204-117a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.162.32:58414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935245, "uuid": "507c78c4-117a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.20.101.17/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935248, "uuid": "51c0cab8-117a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://github.com/user-attachments/files/16784059/p.zip", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935248, "uuid": "51d0b941-117a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/user-attachments/files/16784059/p.zip", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771935558, "uuid": "0abd9312-117b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.72.112:35787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936036, "uuid": "27c88b9b-117c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:43232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936146, "uuid": "693de5a7-117c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8243287745/p9ulf8e.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936157, "uuid": "6fb5e239-117c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.150.187:56203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936520, "uuid": "484990df-117d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.92.185:39088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936698, "uuid": "b1ffbca1-117d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.191:56611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936699, "uuid": "b2cf95ad-117d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.154.42:59823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936760, "uuid": "d7078d0f-117d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.162.32:58414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771936823, "uuid": "fc8433a1-117d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:43232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771937053, "uuid": "85b68744-117e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.150.120:53378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771937483, "uuid": "85e80d03-117f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.27:51520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771937666, "uuid": "f30cc74d-117f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.218.148:44893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771937892, "uuid": "79c4bee7-1180-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.191:56611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771937893, "uuid": "7ab408dd-1180-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.154.42:59823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938088, "uuid": "ee8c5647-1180-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.154.65:33485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938317, "uuid": "7791f353-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.10.63/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938368, "uuid": "95d3c19c-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938368, "uuid": "95df8942-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938371, "uuid": "976817ad-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938371, "uuid": "976cb50b-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938371, "uuid": "976cf5f8-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938371, "uuid": "976ef9c7-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938375, "uuid": "9a14fd31-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.10.63/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938375, "uuid": "9a151193-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.10.63/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938376, "uuid": "9a33cec9-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.10.63/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938376, "uuid": "9a33d16b-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.10.63/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938376, "uuid": "9a4b6b38-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.10.63/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938377, "uuid": "9af17f5d-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938377, "uuid": "9af1a488-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771938377, "uuid": "9af1a583-1181-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.38/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939105, "uuid": "4cc8f523-1183-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.27:41312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939218, "uuid": "907b7387-1183-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.150.187:56203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939295, "uuid": "be372fd0-1183-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.2.151:54243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939344, "uuid": "dbb8af2f-1183-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.186.139:50659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771939525, "uuid": "475b6020-1184-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.2.151:54243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940166, "uuid": "c57b7e58-1185-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7123159424/Q9pS2Uk.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940319, "uuid": "20601eec-1186-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.205.220:44788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940478, "uuid": "7f6341fa-1186-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.186.1:42406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940840, "uuid": "574ed103-1187-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.50.7:48032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940958, "uuid": "9d90dcee-1187-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.186.139:50659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771940959, "uuid": "9e088c11-1187-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.220.151:56522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941024, "uuid": "c4b56fb7-1187-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.68.107:41984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941387, "uuid": "9d3595bf-1188-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.85.143:34606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941852, "uuid": "b265d8d4-1189-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.205.220:44788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941862, "uuid": "b82fecbe-1189-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.27.73:53232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771941925, "uuid": "de0c6d76-1189-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.186.1:42406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942026, "uuid": "1a45b377-118a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://niril.sbs/OGR/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942087, "uuid": "3e9aaba6-118a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/hold-8fad5.firebasestorage.app/o/forst%2Fimage1.jpg?alt=media&token=7aa5baef-e9b8-42d2-a580-edcc6b86df51", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942090, "uuid": "40023e16-118a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/hold-8fad5.firebasestorage.app/o/jrfjpem.txt?alt=media&t", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942225, "uuid": "90a24f1c-118a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.50.7:48032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942283, "uuid": "b30180db-118a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.220.151:56522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942524, "uuid": "429c37e3-118b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.93.215:46724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942641, "uuid": "88b114f0-118b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.181:49727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771942824, "uuid": "f5f1e4ef-118b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.228.61:48386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771943603, "uuid": "c5bcb52a-118d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:39370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771943663, "uuid": "e9ff7ae6-118d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.130:49486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771943678, "uuid": "f2a0d736-118d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.189.253:42420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771944205, "uuid": "2ceb9953-118f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.130:49486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771944206, "uuid": "2d3c1501-118f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.233.65:39972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771944562, "uuid": "01a64d45-1190-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.32:41981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771944910, "uuid": "d135b02b-1190-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.123.59:43905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945035, "uuid": "1bb0178f-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.136.9/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945039, "uuid": "1dff5903-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.117.30.233:8000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945044, "uuid": "21083542-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.229.220:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945050, "uuid": "245ebac9-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.241.208.124:37779/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945093, "uuid": "3e3502cd-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.189.241.96:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945096, "uuid": "3fa4908c-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.17.19:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945096, "uuid": "3fd1e66a-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.85.82.211:64267/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945097, "uuid": "405f3bea-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.210.131.167:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945097, "uuid": "40a861f5-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.17.19:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945107, "uuid": "46902b06-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.183.49.100:26643/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945339, "uuid": "d0b75a6c-1191-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.81.179:48493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945571, "uuid": "5abbeb3c-1192-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.81.179:48493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945579, "uuid": "600bef7e-1192-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.238:53344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945589, "uuid": "65f9e595-1192-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.200.88:33718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945757, "uuid": "ca25c74c-1192-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:50704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945758, "uuid": "ca406c0a-1192-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.32:41981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945810, "uuid": "e99ef1e8-1192-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.81.159:54894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771945937, "uuid": "354b158c-1193-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.189.253:42420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946114, "uuid": "9ee62e9b-1193-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.34.57:55599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946945, "uuid": "8e443b47-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF092.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946946, "uuid": "8e7bdd28-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF091.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946946, "uuid": "8e7cec01-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF131.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946946, "uuid": "8ead0deb-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://comics-pair-little-battery.trycloudflare.com/jw/1PhJ14.wsf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946946, "uuid": "8ed84bf6-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ia600506.us.archive.org/11/items/amd_msi/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946947, "uuid": "8f37e040-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive.org/download/optimized_msi_20260221/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946948, "uuid": "8fa0e6ba-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lucabrasi.rf.gd/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946948, "uuid": "8fb4af4c-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://crixup.com/downloads/o00ptimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946948, "uuid": "8fbd6c09-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://comics-pair-little-battery.trycloudflare.com/jw/PhF19.wsf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946949, "uuid": "90231227-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.8volante.it/teamchatapi/files.download?ticket=eJxNyTsOgzAMANDbeKMlxI7D4A0hMTD1AAicBEUVHwFdOD1r3,pmoZGRuaJUhwBJmk1,S1yvDCotnH.tCQ4pKoOMVLJHiAJZSImd9c4jTe9tv,KS7xiG,tO99nWGIAa.MmnJ1ji14wMVNiAzt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946949, "uuid": "9052faec-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dn720003.ca.archive.org/0/items/optimized_msi_20260221/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946949, "uuid": "906982ef-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hidden8001.rf.gd/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946949, "uuid": "906b392a-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/SO1.png?alt=media&token=06e11488-50fd-4273-877e-92ccc11a2e22", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946949, "uuid": "906d509d-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.100.220/img/optimized_msi.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946950, "uuid": "90fcf531-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://c.fi3.me/666666.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946952, "uuid": "9216db3b-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://excellence01.rf.gd/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771946961, "uuid": "975a67c2-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.202.52:54719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b2997859-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://liked-defence-champions-hook.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b299a650-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://piece-showing-supervision-virtue.trycloudflare.com/PHSep01x86_Ayoo.zip/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b29cc76e-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://exercises-gorgeous-robin-parker.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b29e98e4-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://polyphonic-lights-shipped-minneapolis.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b29f7327-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://classifieds-formation-phones-insulin.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b29fbc2a-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://classifieds-formation-phones-insulin.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947006, "uuid": "b2a16f5d-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://attached-avi-any-dicke.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2ab83a0-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://charitable-proposed-james-postcards.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2ad4fbd-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://piece-showing-supervision-virtue.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2af29aa-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cdt-working-famous-nsw.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2b6d7ad-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://scholar-medline-vegetarian-neon.trycloudflare.com/sep01x86_ayoo.zip/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2b88853-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scholar-medline-vegetarian-neon.trycloudflare.com/sep01x86_ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2ba2593-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://missed-picnic-purpose-daily.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2c08c45-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://tips-dispatch-estates-drive.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2c31a2c-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://classifieds-formation-phones-insulin.trycloudflare.com/Sep01x86_Ayoo.zip/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2e1e224-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dam-basename-performances-mph.trycloudflare.com/sep01x86_ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2e74852-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF232.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2f41dcf-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://missed-picnic-purpose-daily.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2f56e7a-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://instruction-electric-henderson-consisting.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2f60114-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://piece-showing-supervision-virtue.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2f68a6e-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdt-working-famous-nsw.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b2f81311-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://exercises-gorgeous-robin-parker.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b3010325-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://resolutions-fleece-posting-qty.trycloudflare.com/Sep01x86_Ayoo.zip/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b30445d0-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dam-basename-performances-mph.trycloudflare.com/Sep01x86_Ayoo.zip/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b3085aae-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF172.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b30a0818-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/sdExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947007, "uuid": "b31140ac-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF191.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947008, "uuid": "b33d3227-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scientists-protection-tiny-musician.trycloudflare.com/sep01x86_ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947008, "uuid": "b33e727a-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF231.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947008, "uuid": "b3818186-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF192.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947010, "uuid": "b46e151f-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunhx.hollower.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947010, "uuid": "b4ab8b6a-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://radius-spoke-investments-cst.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947010, "uuid": "b4ab93ea-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF132.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947010, "uuid": "b4ace40f-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://struct-lottery-baghdad-francis.trycloudflare.com/PhF171.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947017, "uuid": "b90fd0f2-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/bqsoak.js", "Tag": [ { "name": "strrat", "colour": "#235bed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947018, "uuid": "b94c7bc8-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://radius-spoke-investments-cst.trycloudflare.com/PhF2MA.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947019, "uuid": "ba254784-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/duyoxyyhs/image/upload/v1771933179/optimized_MSI_ba6kku.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947019, "uuid": "ba57b0e6-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radius-spoke-investments-cst.trycloudflare.com/PHSep01x86_Ayoo.zip/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947020, "uuid": "ba7c1c16-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeigkyehyj2ynjwmj3v5sc4j27rmy2dumljfurr7kshzu7fyxkfbx7u.ipfs.dweb.link/?filename=peruConvertedFile.txt", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947020, "uuid": "ba9e5fa3-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.177.214:39363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947021, "uuid": "bafec113-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lungx.hollower.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947042, "uuid": "c7ce4a97-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://xiazaijd.click/googlechrome64%E4%BD%8D.zip", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5e02db9-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/http/silent-deploy.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5e1b1d2-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/setup-worker.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f0bf28-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/http/mine-agent.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f101d5-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/http/mine-agent-linux", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f1176d-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/mine-server", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f1a2d9-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/install.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f2a4fa-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shirts-june-gratis-repository.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f3175f-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://resolutions-fleece-posting-qty.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f31d79-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/http/xmrig-config.json", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f62ba4-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://motorcycles-perform-recipient-happen.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f63074-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://shirts-june-gratis-repository.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f7822a-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/silent-deploy.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f806f2-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://resolutions-fleece-posting-qty.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d5f81dd6-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/xmrig.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d6019bd6-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/bins.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d6019d40-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/http/update-agent.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d613e461-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://straight-though-quest-ratings.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d61a3755-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/setup-worker.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d626ebb2-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://campaigns-barn-jake-controlling.trycloudflare.com/Sep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d62e6dcd-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/mine-agent-linux", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947066, "uuid": "d62f36c1-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.61.40.97:8000/mine-agent.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947067, "uuid": "d6dd9c3f-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/a2work_arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947068, "uuid": "d71281f7-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/bins.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947068, "uuid": "d72a6039-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/a2work_x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947068, "uuid": "d736f8f5-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/a2work_arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947068, "uuid": "d7843eae-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/a2work_ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947068, "uuid": "d78e3b53-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/a2work_arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947069, "uuid": "d79a3571-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/a2work_mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947072, "uuid": "d9bd0bc6-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/a2work_ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947072, "uuid": "d9da249d-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/a2work_x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947072, "uuid": "d9da509e-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/a2work_arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947073, "uuid": "da0e8d9b-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.123/a2work_mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947073, "uuid": "da6d502c-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/a2work_mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947125, "uuid": "f98b415f-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.32.98.188/a2work_mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947131, "uuid": "fcd22fba-1195-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:50704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947607, "uuid": "18b51a1d-1197-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/o0p0timized_MSI.png?alt=media&token=a28749cc-1bea-4bd1-9c70-9d777eed205d", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771947787, "uuid": "83f637d5-1197-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.81.159:54894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948217, "uuid": "84556eda-1198-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.237.148:33544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948471, "uuid": "1b8ee00b-1199-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:50058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948825, "uuid": "eebee462-1199-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.238:53344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771948992, "uuid": "520f664f-119a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.70.186.193:62044/js/app.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949065, "uuid": "7dbeea24-119a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.189.194:59249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949366, "uuid": "314c217b-119b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.0.240:35160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949369, "uuid": "32e9d084-119b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.231.242:38518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949483, "uuid": "76de44e5-119b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:37379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949487, "uuid": "790b1480-119b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.108.218:43848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949663, "uuid": "e221e79a-119b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.226.56:41758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "44664e43-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "446820ed-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "44703ab3-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/netstat", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "4473a60c-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "4473a945-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/arm7_debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "4473cd6a-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "44821633-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949828, "uuid": "449852f5-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.180/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949841, "uuid": "4c4a3433-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.0.240:35160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771949842, "uuid": "4ccdfa84-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.37.205:50871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771950012, "uuid": "b1ce7b41-119c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.237.148:33544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771950449, "uuid": "b64b3656-119d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:57534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771950502, "uuid": "d5d519bf-119d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.75.188:40070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771950864, "uuid": "adaa41ce-119e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:37379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771950983, "uuid": "f5007438-119e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:50058/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951039, "uuid": "16019abc-119f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.231.242:38518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951111, "uuid": "40d32f00-119f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.150.11:41424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951644, "uuid": "7eecf066-11a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.224.215:37988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951648, "uuid": "810696b7-11a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:60198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951757, "uuid": "c2479ed8-11a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunqv.hollower.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951767, "uuid": "c801f0e8-11a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/sbExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951928, "uuid": "283e5c43-11a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ugurhuseyn.az/arquivo_20260224123824.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771951986, "uuid": "4adff5e2-11a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.38.129.77/UamaO168.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952047, "uuid": "6f4594ef-11a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sae20.s3.cubbit.eu/oriv1.7.2.0upload.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952048, "uuid": "6fcfc242-11a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/hold-8fad5.firebasestorage.app/o/forst%2Fpic9.jpg?alt=media&token=bd25b6e0-4b93-49ad-9e28-5fb1821cb2af", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952241, "uuid": "e259f585-11a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.244.75:42225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952350, "uuid": "235ea14a-11a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://web.opendrive.com/api/v1/download/file.json/OTlfNzY3OTc4MDdf?temp_key=%AE%09%DC%98%09-%C6&inline=0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952350, "uuid": "23e1d001-11a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.50.41:34562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952429, "uuid": "52c65e56-11a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.244.75:42225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952775, "uuid": "20ec9b24-11a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.240.131:44916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952778, "uuid": "22b118d5-11a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.150.11:41424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952833, "uuid": "438da7a4-11a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.9.97:57447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952850, "uuid": "4de4e679-11a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.106:39348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771952893, "uuid": "671b6c2e-11a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.66.3:34351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953209, "uuid": "23550a22-11a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.44.122:38934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953262, "uuid": "4331bb38-11a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.5.61:59339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953328, "uuid": "6ac08de9-11a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.50.96:44465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953439, "uuid": "acbe72ab-11a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.105.196:59092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953613, "uuid": "143ed835-11a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8285062997/dKRbHqm.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953796, "uuid": "814d7feb-11a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.145.85:55257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953853, "uuid": "a3a323a4-11a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.93:35253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771953922, "uuid": "ccb98f6b-11a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.66.3:34351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954028, "uuid": "0bcecd2e-11a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.145.85:55257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954115, "uuid": "3fd825c7-11a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.44.122:38934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954226, "uuid": "820518da-11a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.93:35253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954570, "uuid": "4e9df034-11a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.240.131:44916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954640, "uuid": "788c779f-11a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.182.78:36095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954642, "uuid": "7a06c9dd-11a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.91.157:49120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771954819, "uuid": "e344db7c-11a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.5.61:59339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955287, "uuid": "fa5bdf0f-11a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5297474040/ax42UNA.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955344, "uuid": "1c4693d1-11a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5297474040/ax42UNA.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955409, "uuid": "42d90891-11a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.153/n4.jpg", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "portscan", "colour": "#75d076", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955599, "uuid": "b443c19f-11a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.239.93:45205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771955720, "uuid": "fc31bd6c-11a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.59:45045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956007, "uuid": "a7416841-11aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.56.149.224/cacti/ns1.jpg", "Tag": [ { "name": "openssh", "colour": "#7694B9", "exportable": true, "hide_tag": false }, { "name": "pub", "colour": "#89B2AC", "exportable": true, "hide_tag": false }, { "name": "pubkey", "colour": "#F35083", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956380, "uuid": "858936e8-11ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.105.196:59092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956674, "uuid": "34f2d283-11ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:45356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956907, "uuid": "bfe14f04-11ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.129/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956907, "uuid": "bffb6169-11ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.127/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956907, "uuid": "c014339d-11ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.127/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956907, "uuid": "c014391a-11ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.129/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771956980, "uuid": "eb25a9e1-11ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.91.157:49120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957037, "uuid": "0d5722b0-11ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.15.210:55314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957148, "uuid": "4faed279-11ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.102.59:45045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "91389e12-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.89/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "9155aa4f-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.148/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "91584d0e-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.139:8040/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "9158f32f-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.234/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "91590eb9-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.85/bin/support.client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957688, "uuid": "91970f90-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.155/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957689, "uuid": "91b2bcbc-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.100/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "96ff535b-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.163/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "9721aa1e-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.100/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "97240739-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.148/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "972414be-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.155/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "972415f8-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.139:8040/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "97252f3a-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.85/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "978f9b3b-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.99/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "978f9c7e-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.228/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957698, "uuid": "978fa534-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.239:8040/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957700, "uuid": "988996ee-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.234/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957700, "uuid": "98b89db4-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.89/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957703, "uuid": "9a2a82aa-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.72/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "b3f79c9d-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.163/bin/support.client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "b417896f-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.72/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "b417e6b4-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.99/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957746, "uuid": "b417f19c-11ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.228/bin/support.client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771957879, "uuid": "030187a0-11af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.114.42:33037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771958536, "uuid": "8a9e221f-11b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:45356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771958647, "uuid": "cd048606-11b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.15.210:55314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771959019, "uuid": "aa73196b-11b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.246.110:53790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771960038, "uuid": "0a0b947f-11b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.110.119:35113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771960394, "uuid": "de636390-11b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.247:60619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771960466, "uuid": "0951f864-11b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.167.121:41241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961123, "uuid": "90c7167d-11b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.87.233:56710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961232, "uuid": "d1e3e407-11b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://iwkzzjit.rapidmatrix.digital/?=check&&actmn=BZFHzfanLgdnWRJU", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961248, "uuid": "db067966-11b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.167.121:41241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961886, "uuid": "57a7dc61-11b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1781548144/duuoZJB.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771961961, "uuid": "841179f6-11b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:47752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771962016, "uuid": "a523c816-11b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.110.119:35113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771962742, "uuid": "55ddb383-11ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.244.110:58465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771963391, "uuid": "d8893d6c-11bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:47752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771963393, "uuid": "d97621e3-11bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.173.125:44371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771964259, "uuid": "ddb6a43c-11bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.58.184:38797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771964423, "uuid": "3f67175f-11be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.113.35:60216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771964786, "uuid": "17fc33b7-11bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.50.41:34562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771964846, "uuid": "3be38ad7-11bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.199:41737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771965203, "uuid": "1066be86-11c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.173.125:44371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771965204, "uuid": "1102de70-11c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.172.80:49624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771965385, "uuid": "7d5ae40f-11c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.18.50:60344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771965685, "uuid": "302f5ae8-11c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.231:46207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771965799, "uuid": "73b9944d-11c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.199:41737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771965977, "uuid": "de312efc-11c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.236:39800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966154, "uuid": "4737dc00-11c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.150.165:41583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966401, "uuid": "da7e7f5f-11c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.150.165:41583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966457, "uuid": "fc4597d1-11c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.242.146:37755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966628, "uuid": "620d6a91-11c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.64.12:45233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966644, "uuid": "6bb5ed79-11c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.220:58161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966695, "uuid": "89d3b5f3-11c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.242.146:37755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771966812, "uuid": "cfc21fc2-11c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.172.80:49624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967059, "uuid": "62b4a556-11c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.127.201:35154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967177, "uuid": "a9758281-11c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.127.201:35154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967299, "uuid": "f1b58345-11c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.66.138:51423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967350, "uuid": "1065fe27-11c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.236:39800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967649, "uuid": "c2c2c599-11c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.231:46207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "7316053e-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "7319fe90-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "731b0705-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "731c403f-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "731e991c-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "731f1ee3-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "731ffba8-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "732080db-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "73208568-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "7320d026-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "73216a8b-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771967945, "uuid": "732346fd-11c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67/xdlol.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771968198, "uuid": "098140f8-11c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.64.12:45233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771968381, "uuid": "7708c1b1-11c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.114.146:56563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771968437, "uuid": "982c8db0-11c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.39.208:42414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771968617, "uuid": "03ae673a-11c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.106:39348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771968733, "uuid": "48662570-11c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.220:58161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771969036, "uuid": "fd5c0113-11c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.239.47:35483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771969388, "uuid": "cec74079-11c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://s2s942l0.modernsignal.digital/?=check&&actmn=tOFigKJcCVjIlDEQ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771969395, "uuid": "d304edb1-11c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.226.252:43415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771969824, "uuid": "d2d5bc6c-11ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.208.199:42668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771970229, "uuid": "c49797dc-11cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:34616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771970230, "uuid": "c4f98caa-11cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.252.87.232:57939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771970775, "uuid": "09d19d29-11cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.226.252:43415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771970832, "uuid": "2bb4531a-11cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.56.149:50885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771971186, "uuid": "fe9d73f8-11cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/bot.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771971313, "uuid": "4a3886c2-11ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.116:40796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771971313, "uuid": "4a6f2c65-11ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.252.222:47144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771971313, "uuid": "4aa35b73-11ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.228.173:42273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771971677, "uuid": "23686530-11cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.208.199:42668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771971734, "uuid": "4571460c-11cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:50030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771972400, "uuid": "d22617fb-11d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.228.173:42273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771972579, "uuid": "3cdd60c0-11d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.56.149:50885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771972704, "uuid": "87c0bae4-11d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.106.160:34616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771972879, "uuid": "f0250e10-11d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:51469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771972886, "uuid": "f3f93f1c-11d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.150.235:44469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974255, "uuid": "23e3216b-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.145.38:56278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974315, "uuid": "480603cf-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.150.235:44469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974438, "uuid": "91008254-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.189:35613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974496, "uuid": "b39f867c-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:50536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974497, "uuid": "b47cd31a-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.145.38:56278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974500, "uuid": "b64dfa11-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:41743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974619, "uuid": "fcc3cc2f-11d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.101:39704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771974796, "uuid": "66959269-11d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.183.166:58303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771975569, "uuid": "33557bfe-11d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.159.177:43960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771975641, "uuid": "5df561ac-11d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.106.160:34616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771975877, "uuid": "eab9a176-11d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.26.41:33079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976231, "uuid": "bdb52837-11d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.101:39704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976232, "uuid": "be56241d-11d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.183.166:58303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976233, "uuid": "bf285085-11d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.189:35613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976295, "uuid": "e4006f5e-11d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.38.84:33420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976411, "uuid": "28d4b4ff-11da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.26.41:33079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976475, "uuid": "4f7679e5-11da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.243:49815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771976711, "uuid": "dbada6c1-11da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.50.106:47296/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771977309, "uuid": "4041e561-11dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.216.126:35444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771977382, "uuid": "6c040b0c-11dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.6.22:50081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948444, "uuid": "0ba97885-1199-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.28.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771956663, "uuid": "2ea45a9a-11ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.76.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952825, "uuid": "3eab0774-11a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.26.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929965, "uuid": "0504d67c-116e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.69.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942624, "uuid": "7eabbb8e-118b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.87.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771960385, "uuid": "d89added-11b4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.215.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771925825, "uuid": "612fe83e-1164-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.227.2.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771913044, "uuid": "9f6d215f-1146-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.229.29.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771966624, "uuid": "5f91f680-11c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.188.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d878e9c8-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.27.77", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953185, "uuid": "152262df-11a4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.44.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771968363, "uuid": "6c2804b0-11c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.114.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771931525, "uuid": "a6e5da7e-1171-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.221.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771969025, "uuid": "f68aeb15-11c8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.239.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771925825, "uuid": "612fdb7e-1164-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.8.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771907044, "uuid": "a6efedc2-1138-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.127.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771904944, "uuid": "c368a4e8-1133-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.219.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771944905, "uuid": "ce0cf714-1190-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.123.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771909385, "uuid": "1a3b8c67-113e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.66.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952225, "uuid": "d8f35ab4-11a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.244.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771964823, "uuid": "2e598bd5-11bf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.248.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940824, "uuid": "4db3565c-1187-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.50.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771908063, "uuid": "06c047fa-113b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.58.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771903924, "uuid": "633aa6de-1131-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.165.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771969806, "uuid": "c80a16d3-11ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.208.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953786, "uuid": "7b640f45-11a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.145.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d8752e08-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.147.110", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771926845, "uuid": "c12f1c5a-1166-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.202.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952344, "uuid": "2016be83-11a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.50.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771912684, "uuid": "c8c8e7c4-1145-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941845, "uuid": "ae3173c4-1189-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.27.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929965, "uuid": "05053712-116e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940465, "uuid": "77e292bb-1186-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.186.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771915144, "uuid": "831adb26-114b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.104.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771934885, "uuid": "797e7da1-1179-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.230.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771908005, "uuid": "e3d40bc1-113a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.180.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771903924, "uuid": "633a84e3-1131-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.182.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d88340eb-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.38.58.242", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771938064, "uuid": "e0c25475-1180-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.154.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952885, "uuid": "626e664d-11a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.162.66.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945025, "uuid": "1563fc92-1191-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.229.220", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949345, "uuid": "247c2c6a-119b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.231.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771943644, "uuid": "deb306db-118d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.73.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771969385, "uuid": "cd268ca7-11c9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.226.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771970825, "uuid": "2777809d-11cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.56.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945564, "uuid": "56ffbf8e-1192-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.200.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771954625, "uuid": "6f795621-11a7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.91.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945084, "uuid": "3907a2f9-1191-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.210.131.167", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771909205, "uuid": "af65bb84-113d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.146.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771955585, "uuid": "ab9e430c-11a9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.239.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771891805, "uuid": "2c078a2c-1115-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.149.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771977365, "uuid": "61c3b00e-11dc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.6.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771964225, "uuid": "c9ad65b8-11bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.58.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771911843, "uuid": "d355293a-1143-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.223.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771891924, "uuid": "731ffbc9-1115-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.254.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771926605, "uuid": "3263da69-1166-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.50.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942806, "uuid": "eaadaf2b-118b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.228.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916885, "uuid": "90ddb520-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "136.0.213.249", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771904044, "uuid": "ab105e19-1131-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.93.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945025, "uuid": "1563d449-1191-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.117.30.233", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945025, "uuid": "1563b1cc-1191-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.241.208.124", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900743, "uuid": "fb94ea5a-1129-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.133.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771972863, "uuid": "e6856b4f-11d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.150.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771934945, "uuid": "9d50cc2d-1179-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.72.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940285, "uuid": "0c5cefb4-1186-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.205.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771938364, "uuid": "935ff1e7-1181-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.132.38", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d87e7a8b-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.16", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771915744, "uuid": "e8dcb964-114c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.0.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957024, "uuid": "05ca110e-11ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.15.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771965964, "uuid": "d66eb83b-11c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.195.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771940944, "uuid": "953a17d1-1187-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.220.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949825, "uuid": "427901bc-119c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.37.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771896784, "uuid": "c3aef532-1120-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.68.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771905124, "uuid": "2edb8fff-1134-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.187.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945564, "uuid": "56fff1d5-1192-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.235.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900743, "uuid": "fb94f692-1129-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.170.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771901643, "uuid": "13fd5be7-112c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.211.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900384, "uuid": "253730a4-1129-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.22.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771928525, "uuid": "aa845000-116a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.206.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771894084, "uuid": "7a33b338-111a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.26.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771914065, "uuid": "0015da8e-1149-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.33.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953245, "uuid": "38fe3d78-11a4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.5.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771938306, "uuid": "7072da32-1181-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.196.10.63", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949825, "uuid": "4278e601-119c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.196.41.180", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771948985, "uuid": "4e22b6fa-119a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.70.186.193", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1a2164-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.100", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1b05e9-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.139", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f18ef69-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.155", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1c9cd1-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.163", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771934706, "uuid": "0f0c1edf-1179-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.184", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f19e8f3-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.228", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f19bbc7-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.234", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1a7bce-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.239", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1901a7-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.72", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1a1190-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.85", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f192250-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.99", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921807, "uuid": "064a6524-115b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.251.133.225", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771906204, "uuid": "b27560c9-1136-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.194.20.7", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d871ab01-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.51.58.126", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d871a182-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.128.128.60", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936684, "uuid": "aa1d432c-117d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.154.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771965184, "uuid": "057534d5-11c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.172.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939325, "uuid": "cfe81764-1183-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.186.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771926425, "uuid": "c6de5285-1165-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.8.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771959006, "uuid": "a2a80726-11b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.246.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771944185, "uuid": "20c9b993-118f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.233.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771908424, "uuid": "ddc617fd-113b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.13.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771944545, "uuid": "f7b7c43c-118f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.23.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953425, "uuid": "a42464e0-11a4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.105.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771895704, "uuid": "400a3186-111e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.113.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771894143, "uuid": "9d69743b-111a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.147.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d873833f-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.190.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771955705, "uuid": "f35b2dde-11a9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.102.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771910706, "uuid": "2d960d6d-1141-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.89.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899424, "uuid": "e98289e5-1126-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.159.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b25559c8-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.177.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929484, "uuid": "e66ae453-116c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.195.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771900264, "uuid": "de24793d-1128-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.245.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771918564, "uuid": "79bb73e3-1153-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.252.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945804, "uuid": "e5b0e8be-1192-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.81.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949345, "uuid": "247c32c3-119b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.0.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d87a6b31-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.154.112", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d875b565-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.240.200", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771962725, "uuid": "4b5beb19-11ba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.244.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916945, "uuid": "b4d1527d-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.139.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771932244, "uuid": "53a4ae0d-1173-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.19.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942506, "uuid": "382eaed1-118b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.93.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771931284, "uuid": "1728e736-1171-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.101.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771930625, "uuid": "8e619729-116f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2z0nkkls.lumenbit.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d8824374-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.235.118.107", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d8738767-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.82.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936144, "uuid": "681a2c8d-117c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.150.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945084, "uuid": "39079849-1191-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.17.19", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771967044, "uuid": "5a24175e-11c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.127.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771933325, "uuid": "d80cf4bd-1175-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.91.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8dcb59e8-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.202.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771911125, "uuid": "274febf3-1142-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.69.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771939264, "uuid": "ac05167f-1183-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.2.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771902605, "uuid": "51249f38-112e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.245.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771953305, "uuid": "5d13fb35-11a4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.50.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771933145, "uuid": "6c49fd95-1175-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.101.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771954625, "uuid": "6f79575b-11a7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.182.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771976464, "uuid": "488bf274-11da-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.218.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771908063, "uuid": "06c047b9-113b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.237.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771976285, "uuid": "ddc38e4a-11d9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.38.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771899244, "uuid": "7e00fb92-1126-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.47.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771977305, "uuid": "3dbf546a-11dc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.216.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936684, "uuid": "aa1d3356-117d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.89.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771924625, "uuid": "95f428d6-1161-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.141.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771904824, "uuid": "7c33bdf1-1133-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.150.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771963384, "uuid": "d44e4764-11bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.173.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771966145, "uuid": "41ed55cd-11c2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.150.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771975865, "uuid": "e39476fc-11d8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.26.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d8845de8-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.236.94", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d8716c43-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.190.252", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771907583, "uuid": "e895ac5e-1139-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.77.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771910344, "uuid": "56447b4e-1140-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.243.228.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771971305, "uuid": "45d7f238-11ce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.228.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771943644, "uuid": "deb30b09-118d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.189.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957864, "uuid": "fa6411a3-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.114.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946106, "uuid": "99a9f07e-1193-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.34.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917424, "uuid": "d25272a2-1150-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.39.218.69", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d5533a97-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.61.40.97", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951084, "uuid": "31352170-119f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.150.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771936505, "uuid": "3f765519-117d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.92.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d87ec8b8-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.103.42", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771972684, "uuid": "7b8f5e8e-11d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.106.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771949464, "uuid": "6b9fd9cb-119b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.108.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771967284, "uuid": "e9172d70-11c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.66.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771976705, "uuid": "d83bbbfa-11da-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.50.106", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771950485, "uuid": "cc058e9a-119d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.75.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917065, "uuid": "fc586f5a-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771937645, "uuid": "e67910c2-117f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.218.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771941006, "uuid": "ba29459e-1187-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.68.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771927805, "uuid": "fdee249e-1168-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.199.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771922344, "uuid": "46ec60ce-115c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.54.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771911906, "uuid": "f8e041f9-1143-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.8.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771935245, "uuid": "50123f42-117a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.20.101.17", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d875c72a-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.229.228.126", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771945084, "uuid": "390786c2-1191-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.189.241.96", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771955406, "uuid": "40f52353-11a9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.83.39.153", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "portscan", "colour": "#75d076", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771917005, "uuid": "d87cd63d-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.117.6.227", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d5535742-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.32.98.123", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d55548d0-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.32.98.188", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771956905, "uuid": "be837074-11ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.127", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771956905, "uuid": "be831e8e-11ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.129", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f1b4905-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.148", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771957684, "uuid": "8f192d70-11ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.89", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771970224, "uuid": "c185ad1f-11cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "98.252.87.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771907583, "uuid": "e8a3855c-1139-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "area-grove-sync.brightgrove.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b26ac61e-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "attached-avi-any-dicke.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947008, "uuid": "b38a6bbd-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeigkyehyj2ynjwmj3v5sc4j27rmy2dumljfurr7kshzu7fyxkfbx7u.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771893066, "uuid": "1b6a5559-1118-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-grove-park.brightgrove.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771919705, "uuid": "21ea06af-1156-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "brighttail.brightforfox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8e24669c-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "c.fi3.me" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d59d24ea-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "campaigns-barn-jake-controlling.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b26faa59-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdt-working-famous-nsw.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b2794fb4-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "charitable-proposed-james-postcards.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771923125, "uuid": "17dfb329-115e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "chillwater.coldinriver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b2691a6b-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "classifieds-formation-phones-insulin.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771891743, "uuid": "06ecee54-1115-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-field-view.clearfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771915565, "uuid": "7dd3565f-114c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearbreeze.clearatwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8debba8b-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "comics-pair-little-battery.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8e0049f6-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "crixup.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771892823, "uuid": "8adcebfe-1117-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-clear-sync.clearfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946947, "uuid": "8f38c729-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dn720003.ca.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771934764, "uuid": "31b4e01e-1179-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "easyhostweb.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920305, "uuid": "8789f6bc-1157-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "emberpelt.brightforfox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921867, "uuid": "2a85d7c5-115b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "encontros-portugal.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771925287, "uuid": "20c164b7-1163-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "epi66tim.velocore.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8e1e669e-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "excellence01.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b26539ec-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "exercises-gorgeous-robin-parker.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771892643, "uuid": "1fb350f6-1117-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "field-logic-base.clearfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771909624, "uuid": "a8b2cb13-113e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-cliff-high.freshcliff.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921145, "uuid": "7bb69d1c-1159-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "froststream.coldinriver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771913345, "uuid": "52e89d1e-1147-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-fresh-node.freshcliff.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916889, "uuid": "9365b9c9-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "googdownload.googcdngoogchromeleownload.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8e41c89b-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hidden8001.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921925, "uuid": "4ce987e4-115b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "icetorrent.coldinriver.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b276142e-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "instruction-electric-henderson-consisting.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771961230, "uuid": "d05e12f7-11b6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "iwkzzjit.rapidmatrix.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771909145, "uuid": "8b22ea06-113d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "js0qnoh0.alphasync.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771920489, "uuid": "f4ea7558-1157-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kys.cx" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771905963, "uuid": "22f8af46-1136-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-grove-hub.brightgrove.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b26936c0-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "liked-defence-champions-hook.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8e278e16-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lucabrasi.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b2999194-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lungx.hollower.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b2a11437-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunhx.hollower.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771951745, "uuid": "bac07f2d-11a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunqv.hollower.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8debd6b4-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.8volante.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921865, "uuid": "292340a0-115b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mehraasan.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b2834e55-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "missed-picnic-purpose-daily.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d59f8056-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "motorcycles-perform-recipient-happen.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771942024, "uuid": "19067e25-118a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "niril.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771892104, "uuid": "de36afc1-1115-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-zone-monitor.clearfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771931584, "uuid": "ca4f0df7-1171-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ovfs585i.urbanforge.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b25da15c-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "piece-showing-supervision-virtue.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b260856a-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "polyphonic-lights-shipped-minneapolis.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771925107, "uuid": "b57e30c9-1162-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickpetal.fastleaf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771924565, "uuid": "7290e572-1161-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapidfern.fastleaf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b26f24bb-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "resolutions-fleece-posting-qty.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771927446, "uuid": "276891fb-1168-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rockgrove.wildandstone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771969385, "uuid": "cd41877e-11c9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "s2s942l0.modernsignal.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771952046, "uuid": "6e4f2758-11a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sae20.s3.cubbit.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921865, "uuid": "2926f71d-115b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sahammbank.help" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d59b59a2-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shirts-june-gratis-repository.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916886, "uuid": "9144957b-114f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssagntroplexa.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771926064, "uuid": "f03aa284-1164-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stonewild.wildandstone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947065, "uuid": "d5a0a856-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "straight-though-quest-ratings.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771946945, "uuid": "8ddeea7d-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "struct-lottery-baghdad-francis.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771914965, "uuid": "182ec209-114b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "summit-cliff-sync.freshcliff.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771924266, "uuid": "c023fcc1-1160-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "swiftbranch.fastleaf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947006, "uuid": "b2782595-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tips-dispatch-estates-drive.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771921865, "uuid": "2925e555-115b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tukprivate-uz.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771929245, "uuid": "58070edb-116c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vbb24wmu.lumenbit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771916106, "uuid": "c068e8b3-114d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "windglade.clearatwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771947009, "uuid": "b4536f9f-1195-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "xiazaijd.click" } ] } }