{ "Event": { "published": true, "date": "2026-03-11", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-11", "timestamp": 1773274526, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "3f17f3f1-a280-4d5c-97c3-691c02fcda1a", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773188166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188166, "uuid": "640f48e2-5f1e-447a-86e4-0cf2a802ad1a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188166, "uuid": "6534417d-c95c-42dc-b303-80f538e27899", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188166, "uuid": "27b46dd8-65e8-4e96-8afd-bb4d3017006b", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188166, "uuid": "9a0b0432-d74e-4e58-921b-cc0dd140ac93", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773188166, "uuid": "377d241c-3214-4a0e-85a8-64df9a20392b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773188228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188228, "uuid": "e2e9775e-2538-4771-b150-fcfdb5b15c79", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188228, "uuid": "d369dc27-6d14-44f3-8708-4136854961c1", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188228, "uuid": "5f3b342c-24e3-476a-88a2-e420c41c128a", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188228, "uuid": "8322d437-feb4-4fc6-a892-417f41c2432a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773188228, "uuid": "4f4748de-c60f-4a69-bfe1-1f50ed347b9f", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58e7e019-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "a0f72b0e-4048-462b-86e0-bf9460be4127", "comment": "Malware payload (Mirai)", "value": "90eefc6b04f68b9272cc82200debfdd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "1bf4ad42-d50c-46e1-b58d-8930e336f487", "comment": "Malware payload (Mirai)", "value": "7819509e1693d0fb4a35a95ab4b2e8adac2ad66c0e77a602c8d670eda66c0808", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "2af23c16-32eb-48b6-ae73-c75c8403e2c9", "value": "T11A834BD7F410DDBDF80ED77B4463490AB131A39219831F3A639BB967BC321943966E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "d39119e1-c34f-46f4-adaa-18c559d005a8", "value": "1536:mEOAoGHPzE5HqZWaDX+aZ8oyCsFTNHFFaWonzs6N2uAQJSYh2a4rsvg:mEOAZHPWqcaDX+aTyCsFJiW6zsKAYh2J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191108, "uuid": "61e0e206-fb72-4bca-82bf-8dc943415bd1", "value": 85804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "ca11ab16-1255-465b-a78b-931a623c61de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58e85284-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "c0dafe5a-4e1e-42e6-9d5a-e9399c553e57", "comment": "Malware payload (Mirai)", "value": "1bd1eb17f144729896e807affc3384b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "75d8bf7a-8d2a-4460-8575-eb272dfead80", "comment": "Malware payload (Mirai)", "value": "538b798e82d1fea1a0d81cf15ffd31c5d6e08324caf4f3b1526d090f3bd4e46c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "2c27253b-de93-4e9d-986f-e7e98adc9efd", "value": "T187F2E16459079D62DBFA4A3BEE38434943EE2B7CC0E4F0A52F14F6784081696F1B87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "1156c9b2-429d-4829-8278-4b04a6af09f1", "value": "768:NEWanU+dRP2QDd4TWAQeAfDDiDoXllVRqmYE7Or8Pgg3bCkJ0jCSHZMs3UozI:NEWaUSR9DKFQe09o3Yxdo3JzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191108, "uuid": "315727b6-afea-4a56-93bb-fb8fc10d1878", "value": 37456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "98ee77ba-73cc-4e45-a90d-6ead8034e7a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58f82ad3-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "6d7b9987-d006-4939-8400-f325975475b4", "comment": "Malware payload (Mirai)", "value": "1752e0302d654a1a6fab6880047beedf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "c8f3cf58-eef4-4ab7-9bc4-b2d53ac268a8", "comment": "Malware payload (Mirai)", "value": "93b23bac5ea8cd4bfdcd435d23fe604bdd8f0b92b9400bdb9ef2a28d7a100dda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "6dacde4f-2477-4ca0-a56f-7095df6072a7", "value": "T1BF03F16570C55CE1DADC7A73BD7D2672EB24A0C2A20A168923158CC4D76C252BD4E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "5a03b62d-ddf4-477c-a16c-4119b07f8fe5", "value": "768:i6bMN2q8qb06Ds/8ywvgI6tXW2IQXUkwx4igsA8/STJusQDKj9yQWl:i6gzPb08y7IKszq78uJurDKj9yf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191108, "uuid": "4dd85d06-e4cb-4a65-aa62-5c4711177907", "value": 40032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "10fa5ea1-e137-45d7-b79a-81f33ee68d87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58fbeb4d-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "4da84ab4-461c-4f40-a13a-a20abcc75b3c", "comment": "Malware payload (Mirai)", "value": "f7c92d8a4b26991501504740eda5bb43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "1006cc05-6f3c-4b67-9bd4-9ae00871578e", "comment": "Malware payload (Mirai)", "value": "0966580098f016ee4499ef66fd202e54126d6211ba0cd1fa16d8d7f0f0e4c4ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "9d1c601a-39bb-4f5f-897f-705b434990a9", "value": "T1D8837C32BA751D27C4D0687A61F30721F2F6479B25EC8A1A7DB20D8EBF2564032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "e1b41b57-d843-4c5f-af82-4fada9663bb5", "value": "1536:BqjSIdmh69OHkGvTdN5zoa5XzQKt0qrNM5owQovwVY4t/7o9VNNus73:sWTlEG3V9JScN8vQKkK+s73", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191108, "uuid": "9d629de3-8345-4034-8451-6dab895db000", "value": 85512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "511161bf-618e-47c9-8bb5-d91c3a8e60f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59071c69-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "90e609de-2865-4d7e-8240-4ce44ff11b82", "comment": "Malware payload (Mirai)", "value": "a0f3a6d8911e4754a7de8f424a2d1a77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191108, "uuid": "dfbbdf17-2952-49a3-9a59-153a4f6cacbe", "comment": "Malware payload (Mirai)", "value": "9a7d4e38fc85a72456e53d87d8c9f566d9d298f930ed3be442a1df852e341ab9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "d47c1ab0-73c6-4bb4-8b3b-25ded8b661d7", "value": "T1C5530284F05DF3C09AD00E7DD37646A74C686DB8C2EE705312B5960045972E7B2BCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "691d981f-bd46-41b0-9fc4-6b904e5892b2", "value": "768:4SalDl+sgnyDYtAV4m1ETCDeoqL2VBye1dqjrOR9q3UELLPPk805d6cvUMQ4tFl4:haBl+sbDYeOm4CDR5d1UjTLNtcv64rO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191108, "uuid": "dde3eda8-c8d7-4689-9e5e-9ca4d25dfb59", "value": 61852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191108, "uuid": "7fd88752-75d3-4802-ab89-a16e5f570938", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b65b767-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191112, "uuid": "3bb5aeb8-1630-4306-be81-cc8deda4af39", "comment": "Malware payload (Mirai)", "value": "3c6f060a3704d43c31f61bcfee0dcdd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191112, "uuid": "e4054d0a-e82c-4ab2-85b2-297d612400f9", "comment": "Malware payload (Mirai)", "value": "d95cca527e3456768495a4cb89661b01910cff465e520b9ed73143dd8068db6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191112, "uuid": "8fc5bfd8-f026-4d16-8991-4d551135a01e", "value": "T1EE03E0C2D1B19FF2C2760C75FDDC0D852B4A27A552FB211AB69D2750F986C82ABF05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191112, "uuid": "2a9566eb-a299-46f5-8d41-198a23ec2fd4", "value": "768:/04CCQup1y2UqSWLrjTf2fG2iKvmtlZ8hku9q3UELon:/0TupMVLWLDf2fbiKvmnZ8h6LM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191112, "uuid": "d6f815cf-9c04-4734-994c-2e1282ee7a3e", "value": 40032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191112, "uuid": "24f0e85f-a6ad-4789-b17f-5789c2d62bea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b7bdc49-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191112, "uuid": "92103ec3-224c-4ed7-9371-2ff454e95578", "comment": "Malware payload (Mirai)", "value": "a55d1f5ed50648323a9d31284f388eea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191112, "uuid": "012e0c16-36de-402f-b16d-db86ed4ea3a2", "comment": "Malware payload (Mirai)", "value": "a09006bd59a03472033d3e8fd71c160f37d3870dd04e94a0ab09fe15ee32db5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191112, "uuid": "a337afee-3e90-4f5a-9565-b6b46154ad46", "value": "T11692E13C50F9E431F6A00C35CB6DC848F653237C11F676602916D2A4FA8B645A67EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191112, "uuid": "e12ac0f6-5e06-4ada-9f73-31c751b3e3db", "value": "384:0u1uGPCl4YYEJ9yyQ/9ceV14ThC9dDPwTgArE0SrqUhj1/ZhymdGUop5h5kFaN:rCl4189Y9csmC9J+gAgrqe5/Zs3UozWI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191112, "uuid": "3e497f59-3b7b-409a-87f8-355317bf846b", "value": 20868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191112, "uuid": "54b42d22-eb64-4c24-8e51-b7d225c0fd28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bab9343-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191113, "uuid": "b8016add-cb9a-41ed-8432-01e1dbebf04b", "comment": "Malware payload (Mirai)", "value": "c37990b3e78a8e8cc52105de5458619a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191113, "uuid": "93ca46bf-dbb3-4b6a-a3dd-90598500d323", "comment": "Malware payload (Mirai)", "value": "c8fd4bfc20af78f548302c064270bd845617516981a9e992604f0bee83643f61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191113, "uuid": "8c8fccca-08be-4760-9ebf-dbe9743f3fd4", "value": "T12703F10D83147ED5C32884BA15BD03922D724FF66E8BAC9AE169AFD35D514A074CEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191113, "uuid": "8b6f3fba-6431-4ef7-bfa0-9c5ba0dab9cf", "value": "768:Qgi231FZvxdHNiA+Vlw3JhK+AygVbSMTukpeP78iGzybDJgGlzDpbuR1Jr:QKhx9+SJs+rKOH7pGmb5VJu1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191113, "uuid": "f58049bd-1ff6-40c3-8bf6-558291bde5fc", "value": 38948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191113, "uuid": "76d23049-f347-40a7-b8f0-927e2eef962c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "805b8dbe-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191174, "uuid": "7d99a486-6d46-4aea-82c6-841bedbe419b", "comment": "Malware payload (Mirai)", "value": "73cdb9b0314b3a23d805abe33e690f33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191174, "uuid": "5608d6e1-3500-4386-9829-33005bef5458", "comment": "Malware payload (Mirai)", "value": "bfd5367b17bfd9ef62f0627526ec992abdd32bd67fc6b6ec1cf6bac534d87e66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191174, "uuid": "5e9d8f62-3964-4780-8eb9-0ec63a1bb875", "value": "T16DF2E160D1C5DDF2E9A96CA8A95AB7D0A3D14BE93320CEC290D7EF02271B71A750FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191174, "uuid": "15aaed2f-bb36-4ca7-8eaa-43ecf2aff7cd", "value": "768:XtuamiJLv9aBlwtZlzF9XcMKQTvXT+C2I94YdEX94uVcqgw09U:XtuHy0UZlPRKP5YdEX94u+qgw09U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191174, "uuid": "9a17408f-a71e-4ed2-bf6b-f85e76fcfeef", "value": 36260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191174, "uuid": "d97c65cc-be1b-4eaf-b35c-38e01daef568", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "806b56af-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191174, "uuid": "0eab9b98-f2f3-4eb2-b2a1-1f5b2c3db4ff", "comment": "Malware payload (Mirai)", "value": "496ce071e988be76f3e65578b6e00c99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191174, "uuid": "063e6d49-4867-4529-89fa-eefeb68f3e1b", "comment": "Malware payload (Mirai)", "value": "a8ef8939500969a844d1eb892e35b713ddd34a98af911127c1d75633127a68c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191174, "uuid": "65b85ef1-c28b-44ee-9a68-a5bbad656dd5", "value": "T16E639EB3C9393E94D25541B4B830CA795B53B48481871FFA5A98C6FA4047EBCFA093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191174, "uuid": "4ed7a162-f2bf-4aa2-8f50-1fb212794c68", "value": "1536:sa9wtr82FLQgB97HK9QATGRuzuCy2KNdwq61d6o:sib25QgD7q9sRuzu44q7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191174, "uuid": "2cdd52ba-5d96-4c52-bca2-6dd3f8416f47", "value": 69116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191174, "uuid": "9ea06152-df0c-41fc-a5aa-6d6fb57076c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "808da989-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773191175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191175, "uuid": "3aeb4ebc-ba1f-463c-b3ee-743a7968c9e2", "comment": "Malware payload (Mirai)", "value": "d2a04f909d0628bde3b606b643975820", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191175, "uuid": "7caa82f9-646c-4b8e-9f02-c49639d563aa", "comment": "Malware payload (Mirai)", "value": "e263164bda5eabffd2b58639673308262ddb75acd83b70dd873774922fbf3fa0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191175, "uuid": "053d6c55-6be3-48c9-a125-0a6810ddef84", "value": "T1DCF2F19A88D45980C16E1739203FFD0A3680FCAFE195CD9ADE98313E80C478961E80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191175, "uuid": "73774fa9-cae5-451e-841b-a1db9aa33543", "value": "768:/T7+FNO23h/S0ZK/B8viBryvvyIB39I1lyqwlW0RnbcuyD7UtQRjU:/TAIokaA+p3Clyi0Rnouy8tyY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773191175, "uuid": "1867e8e5-60fd-4620-ba3c-82e5a4497ff6", "value": 35256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191175, "uuid": "c4197871-f929-4cf6-9099-c1bbc4eb5599", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe3b66c7-1cea-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773193103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193103, "uuid": "73909cf6-a7d6-4102-a904-38aa33e47c02", "comment": "Malware payload", "value": "8971cc9e5104a314744f194142b5c360", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193103, "uuid": "4499abcc-66be-4ced-b75f-4372d71874b0", "comment": "Malware payload", "value": "488a1fea5c08b49211537f88ea497cb9ab8c2011abecb35c70ec796e14ee3704", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193103, "uuid": "837615b6-f9fa-4d8f-96be-b1d3c0943abf", "value": "T16A32567B21F08B32D7D410C963B61A614E72A70B496614B9F4FE5739AF2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193103, "uuid": "f9b99138-4fbd-4c8a-88d2-2f40df2f3dfa", "value": "96:cCuolB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjKlWXaEXHArCAr8yspi:cCua6p4hvZ5mN9oKNpivAwRlw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773193103, "uuid": "c636ab00-4551-4b11-b9a3-8293d90f9974", "value": 11969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193103, "uuid": "b524c43c-667f-4e37-91b5-0c32d6f770b6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f36ab1b-1cea-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773193750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193750, "uuid": "32304949-a6b0-4ce8-9317-5b49ae1c3720", "comment": "Malware payload", "value": "dc19805e1b4cb6712c450b428f130abe", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193750, "uuid": "32f3f4b6-b541-42a2-be93-bcbab4e068ee", "comment": "Malware payload", "value": "81df7102540b8d871efbf8a77830f5d12ae3fc5652fb450f979ca227cda013cb", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193750, "uuid": "326f6329-2d15-409c-b967-d3e2b8db99db", "value": "T151D6336067E65AA3C5A3D23C77435486E375E2633987C2423B4CF3ED9F3E2A04B549", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193750, "uuid": "50161359-a499-470c-b27e-aad7ab40f785", "value": "ed211f07e785e19a34ec9ab48263f8c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193750, "uuid": "9e3004ac-c505-44a2-9e1a-950adbf456c6", "value": "196608:XxfoYTdxWxZz8AE5zhX7oL9AYBgm7ItghswvWtNhXjeZeSu9emU+LCKZ9S0bBL2N:XxQTMAkdohgm7I+hgXhjkiA/OSEBSN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773193750, "uuid": "058fcf03-2d34-4db4-bd67-0fd8b2563c5b", "value": 13818657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193750, "uuid": "c5293b8e-7afc-48e7-a363-032bf0b3f4dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4bfd000-1cef-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Fuery)", "timestamp": 1773195181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195181, "uuid": "aa43b966-f137-4448-b096-523c9afb169f", "comment": "Malware payload (Fuery)", "value": "cf7c00f102d4c6950a9896a6ee7162bb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195181, "uuid": "d37aa8ad-1b53-45e3-8a82-a2741ee26908", "comment": "Malware payload (Fuery)", "value": "6a961af4e35488055057fb199555b02b135f81b8eca22d1b500d13054aaadb63", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195181, "uuid": "1ffd53f1-2ac2-43bd-88d1-f1b9bef408a3", "value": "T1F5854901FEC744B5E906273269EB22EF2374A8090F369B97DA407A7DF9776D609323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195181, "uuid": "e1e8856d-6f4c-47ea-84d7-bbe3a43403d5", "value": "5af915f278815e76bad476ef32593028", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195181, "uuid": "25a5d6ee-8ed2-4559-934c-c6f5f22bff91", "value": "24576:NGb+1l97xc6Ht5DecD+HcLxBZllWAFhOhgjgcdEPTlpepyFD:NnFp9xV3gcdaTlpsy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773195181, "uuid": "6d7bd0f1-8b68-493b-bb21-b2c6fc25b2e4", "value": 1826304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195181, "uuid": "ee5d6660-67e3-4e7f-8d3a-e6189f7ae399", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fab81af-1cf0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773195495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195495, "uuid": "4daaa616-a91c-4068-aefc-002934a707ef", "comment": "Malware payload", "value": "1dc0bced093bcaace93b9174f835c36c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195495, "uuid": "cead824b-de01-4043-984e-0d4464707011", "comment": "Malware payload", "value": "00fd7d00716ec4fbdf9d6b885f57aa808e1cf49a3087df3c64a3f29a6a84a7ad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195495, "uuid": "1b48522c-ed88-4c74-808c-58e2d0a04b96", "value": "T12ED3085F97BA317571178305F8E6673492ACC133EA424AE2FCB6D25C8FC126201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195495, "uuid": "3940c11e-5271-47e2-8744-c780096a3969", "value": "768:tZdapEbrcXlP3RNjcXscJGcz74k/tHcTwAg5H9y148jF40ER66hYTd:lapArIQ4k2wh5H9yPF4BRHhYTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773195495, "uuid": "572fcd89-eec2-43a0-9d90-ec52a9709bb3", "value": 140790, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195495, "uuid": "f148e143-ab9d-4084-b205-fac923cf40f5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a3a0d0a-1cf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773195781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195781, "uuid": "0c7f6009-7c4b-49c7-b1e3-a836c51613fd", "comment": "Malware payload", "value": "6e037612212a95b3a86d7fcf567eb165", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195781, "uuid": "d47737af-2132-42cf-a351-df839f7dd545", "comment": "Malware payload", "value": "6070f33be056da6a0adb1bfbcd1eb0dac7ce86a63d2da862d79c5703a848cd34", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195781, "uuid": "669805d9-d041-49c4-827a-a774dd07a6b4", "value": "T15593093174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195781, "uuid": "0f781133-edec-45e2-bf6c-6af4948f8221", "value": "1536:pXyp1xQ/uwMmAIa14oXs/ITepeV7tb73WAxCJCStkb5fvnw05S4jrmiaPsCZKT6i:pisIczEStkbFvnw05S4jroPsCZw6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773195781, "uuid": "b0d95b72-0e49-4243-be14-bc572ccfd6e3", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195781, "uuid": "4288297c-863f-4821-9007-a3823b0974a2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9933584-1cf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773196075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196075, "uuid": "246ef21e-3526-4fff-b4e6-c5f412326c00", "comment": "Malware payload", "value": "7a22242e7b3f7644d62e70a7747b9d1f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196075, "uuid": "944d3940-997b-4898-b407-f15938f636df", "comment": "Malware payload", "value": "a23637c6dca984b1b32e34937f9e1ca1854eb9f16b43617feee77fcec0a4d512", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196075, "uuid": "89c99c4a-35d5-4683-b5a1-2f70e08abf41", "value": "T189F63380DD43D508EE2DC4B6D9F9EBCA250F22D695A124F3E97AFB6C7902070CE574", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196075, "uuid": "00b6eecb-c80b-4b39-97a6-bfaef123ef94", "value": "393216:ZCuW2ea0YIlpGF0JA4iiSJezYY23Ld150mMx0MuxSzubB+SV:K2ea0tUFGaHozYnbd6uIcBVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773196075, "uuid": "4716dbd2-5f6b-4907-95b9-c119b1eeb5f1", "value": 16374601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196075, "uuid": "ca6c5181-fd6e-4947-8dc1-59495a56aa14", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a672a959-1cf2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773196392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196392, "uuid": "6865a4b6-3750-40b0-99a6-647204fbe796", "comment": "Malware payload", "value": "bc790488d26b83436051504699eee245", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196392, "uuid": "d31ccde6-126d-4cc5-96df-2ece5cae1f1e", "comment": "Malware payload", "value": "5d2aad2ba1c6d0ab103a8f15270c66e4d380107131c46fd2e8bfdebea9b52eec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196392, "uuid": "70480973-c640-4960-abc1-65291c9c5f75", "value": "T1BC8308327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196392, "uuid": "b9c89af4-b545-486f-9495-f3566b8c6b5e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnNWajVN/:XEKltp9txAX/yr2pbNWCVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773196392, "uuid": "d7c73b8e-f945-4cfb-8358-eb92135d7d47", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196392, "uuid": "73e00374-0d4d-48b7-a6c0-cba13247c269", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773196571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196571, "uuid": "dd62fb33-ddf6-4a38-870c-a689e956c789", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196571, "uuid": "a39bbd60-e6fe-418c-bb43-6ae2b205e249", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196571, "uuid": "facd248a-7266-43bd-b3ea-84a184ee5aab", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196571, "uuid": "b8b1421b-a5ca-4919-adec-41663fd90bd1", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773196571, "uuid": "9e0a27a2-4f0e-4776-bb5b-6b600f9f7c84", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773197233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197233, "uuid": "8c60255f-531c-487e-a47a-707421805117", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197233, "uuid": "39a91f00-1e16-41d5-b1be-0878e8f0d893", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773197233, "uuid": "65fa5d62-6b77-4148-9bd3-d22a890222fa", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773197233, "uuid": "a3ed3e03-b651-415d-bb1d-1378b2628bdc", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773197233, "uuid": "a4032fb6-1be4-4ebe-8e1e-1ba85ac5c0bb", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9992532-1995-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773199309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199309, "uuid": "0a239e1f-3bc8-46d7-b34f-5218396398b8", "comment": "Malware payload", "value": "97d67632afe554ff42c5fdbb1c6de176", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199309, "uuid": "70c3206a-16a2-48e5-9880-3b14d2b70766", "comment": "Malware payload", "value": "0782c2520a476fb98e6a0bd01937df57a0c730b113c8ec149e2c6be534aa91a3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199309, "uuid": "e194a80d-936c-45f1-999f-428e6a247bd3", "value": "T18581CAC9715207E52F2CEA3267BFC50C5785D1CFE4C11F99FADA6AA44D8CDC82C841", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199309, "uuid": "13a89fa5-a5ab-4185-bd09-ee0c294b6e0c", "value": "48:v8UrUQxlUoUOEUYUvUpUCUdUuUCU5UtUPn:v8UrUGUoUOEUYUvUpUCUdUuUCU5UtUPn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773199309, "uuid": "0ac9b911-c774-4d11-9cf5-1b954e291c78", "value": 4050, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199309, "uuid": "91c33919-9d9a-4d3f-901f-aa50911df6b6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a218907-1cfa-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773199619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199619, "uuid": "9504a40e-fac3-424c-92a9-a3d5cbf75d33", "comment": "Malware payload", "value": "e14a492f1a203cabd81dec39cc3187ff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199619, "uuid": "a37c2bef-8189-4af0-b673-5adc74df9b99", "comment": "Malware payload", "value": "c7e755b42cb6a24b928fb49c52b9c74d146d588fe406afaaa7f44c13c4b9f418", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199619, "uuid": "05658113-a963-40aa-909e-a35461907038", "value": "T1C621A7E560F267F2578EE8000A415AC5C30965125DDB18DCB060FE7E7AFAC68F8E4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199619, "uuid": "cb33e929-4682-4694-8b76-b361782d1f52", "value": "24:5rwD3NHG5uS72txSMKbGFQ9iGyuOGWQisLQDl0MFqSBvLrvOPp4/aQ:5rwDdHGgS72fSMKbGq9inuOUbQDqOqS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773199619, "uuid": "87348bd3-5d08-4e86-9605-1afe24c76b9c", "value": 1163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199619, "uuid": "82cf85fc-b229-4019-8dfb-92f259e9eaae", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773199876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199876, "uuid": "6b5ee396-5f2b-4fec-8d1a-c9787e9ed7c2", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199876, "uuid": "9caceeff-0a76-4b45-af37-27111bb824a4", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199876, "uuid": "79e2a0d8-a1c9-4a36-b544-f06835dee8e2", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199876, "uuid": "0a58c996-5bce-466c-b076-9dcab92db64e", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773199876, "uuid": "e4ac0cd9-a802-45c4-88db-1550f3c40829", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2cf9fbf-1cfa-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773199956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199956, "uuid": "3354ae4a-3895-4c8e-9bef-384920003549", "comment": "Malware payload", "value": "9b5607ed3a52998669bcb647abd060b8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199956, "uuid": "a8d4d889-f0c0-40d5-b7cc-9c65041d3c11", "comment": "Malware payload", "value": "e27bdfccdd52dce9a26571b6a4cd913d7e00d96490852232aa9116686aa1b1fa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199956, "uuid": "a861eb9b-986a-4411-b047-9ee4e786cf1f", "value": "T195E2E8739159007A3B5E87A490A0B318EE55D226DB06A7B6B1FC31AC9BD4EF700F72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199956, "uuid": "b003f891-19f7-46b8-90be-b9638b8ecb1e", "value": "384:lq2/Nir/ZdSZUaAskWYI4Etu2txZ2T4aUWLE0sl9Sc:lqHZdypJYIRDBJWo0sCc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773199956, "uuid": "bb9c334b-3e07-4eb1-8ee3-b55def30fe3a", "value": 32723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199956, "uuid": "a5a54c75-5b73-4ab5-9e14-90655d2ecdae", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efd003ca-1cfb-11f1-8a4c-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1773200381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200381, "uuid": "e85adf3f-237a-456c-9b16-f24e1d081663", "comment": "Malware payload (RemcosRAT)", "value": "362717ee552f647f662f464b5080747d", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200381, "uuid": "4116adec-fec8-4252-b912-960ece88c11b", "comment": "Malware payload (RemcosRAT)", "value": "1dd20400a7bb38e2bc807c8bbe15fb719b3466be957bbd9b71f620f876916287", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200381, "uuid": "113d2c31-711b-48bf-967a-6166fecdbcd7", "value": "T17B36137A69E854E0EA5AC920E4D322F2FC971339A95838973179CDFEE3C8C1D54907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200381, "uuid": "6f1b152c-1773-432a-b356-b7613e1b9679", "value": "192:ui8HM9H0SfH83/g/ksVPAS7vByBib0SKFH/eeAixSuzGqA1iyD/:OASqviy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773200381, "uuid": "9452edbe-b9fd-4f61-a477-85c2c4787e22", "value": 5113303, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200381, "uuid": "b800c2a3-82b8-4e6b-a22d-09351ea7e630", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90f81899-1cfc-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773200651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200651, "uuid": "4af083b8-1c5e-4ad8-81a4-a03f3896f9ea", "comment": "Malware payload", "value": "930db2a3b6ecbf9e45fc04f4dd238295", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200651, "uuid": "40e0d7a6-065c-4d9e-8327-fc93bd11f66c", "comment": "Malware payload", "value": "d5d9bcdbd409f8d912e17f214066ad55a89e6d61f9ba6c26f68f247582f15a44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200651, "uuid": "36c06c3e-a6b7-4800-bcf1-db08db39ea17", "value": "T1ECA3E91916670890F1EEDDC00D85B8BA1A1377B3A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200651, "uuid": "e4a0bbf5-7d34-43ef-aadb-3223c3c01f4f", "value": "1536:c4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAv:dgVBH3mPm+sqk+HAw0F5KijXxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773200651, "uuid": "f24ab881-a073-4158-8f10-ba1a10989791", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200651, "uuid": "c147bd47-df28-4998-99f2-b079a6a430ab", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "964b9d7a-1cfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1773201089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201089, "uuid": "14d4ed43-4548-4f25-ab17-0d69d00c4c0d", "comment": "Malware payload (AsyncRAT)", "value": "38931b2c558bd178c3bd510947e14f28", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201089, "uuid": "a78ee6f0-3114-47ef-8a96-82a31186095b", "comment": "Malware payload (AsyncRAT)", "value": "b2f7cd8a8984266ccf8060b18823cdbe01a88f62b809b083b681028c0c11d793", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201089, "uuid": "fc0fe435-275d-46ec-a891-c1b34102e274", "value": "T103261233517F9C644BE68581093479B4D8043673D60DBA6A74882FF7A38981867E2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201089, "uuid": "7fc8933c-d8aa-47fa-b7a9-5483d1159b4d", "value": "768:ISZrBo6BBclNFfcLOY1stSSdL/Dhh7To5DlftGj46A1oA1oEj5DlftGj46d2oyxY:a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773201089, "uuid": "3ac67370-7b15-4cbe-a2e1-fc2bd9f240cc", "value": 4605954, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201089, "uuid": "8706e82d-0cee-4e23-a887-946a018dda19", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773204016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204016, "uuid": "4a1ec046-55e7-4341-ab1d-c3a2b2a9fc5e", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204016, "uuid": "3cf70921-7ffc-47d2-ad31-e3a5e01423fd", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204016, "uuid": "b1338017-26a2-4bd7-b4fd-2ba4f54e6bec", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204016, "uuid": "f0747784-6b0c-405d-a983-be66afd82379", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773204016, "uuid": "246c0ffb-6a1a-4cb3-b7a8-8c24df1e3568", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49c9b38c-1d15-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773211269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773211269, "uuid": "d37f8c2c-177f-43ae-8ec1-2020daebff3d", "comment": "Malware payload (Mirai)", "value": "51a1dc3962d2cc9c284733197e59f5e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773211269, "uuid": "0bfe1cef-8d01-404d-85cf-b0c053d96d2d", "comment": "Malware payload (Mirai)", "value": "9435f5f34f606fe496c779c808b033d86c63b2a71a2b7d3c6617c43df9226762", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773211269, "uuid": "0adf214a-d0ed-4836-a5af-53a6639a7c2b", "value": "T1AF145A43EE890EDAC867CDF086BF835B29E3669B88D1F1F4543C8C1C795D19A45E36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773211269, "uuid": "4147dd70-edf2-49b3-9090-6fa7d2f8be47", "value": "3072:I2LhkfBjd683WpldBT73KWXBYsO3l0BI/u0S5cbK5i7/a4ZfEs1yRnUq:qB53QHBT7anHDS5cbmU/nX1yRnUq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773211269, "uuid": "582413ea-99a3-430d-84f3-5a197ec9b58f", "value": 201124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773211269, "uuid": "0a45eace-9b5f-465b-a132-cbf3b3745e18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ee73e89-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1773212286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773212286, "uuid": "31afe097-f292-4058-85d8-b0b67d95db6c", "comment": "Malware payload (ACRStealer)", "value": "d7b941bfb5ba7d37137b0e74e83f6cf8", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773212286, "uuid": "c0da39ee-f407-4ded-b675-148378f359a9", "comment": "Malware payload (ACRStealer)", "value": "2d0f49b4f602791d7341a1ca350e84d8ea622cfc09928b8d3f1df5ce48a11bc1", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212286, "uuid": "45ef75a4-75a8-4b3c-9dbb-4a57a58d4439", "value": "T187558D5DE6FA05B5E4AE523941179A1FA331BC3C0F10CACB12A4CE7E9F66BE14934B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212286, "uuid": "60b63a15-fbe2-411e-a6a4-71fc038344a8", "value": "6f8e9e4ca91e2007f07d7c4bc1035c4b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212286, "uuid": "bfafa20b-1d37-4dfa-8842-bf39762a7839", "value": "24576:Ut3JZbemnervmsUG1/P8XUXd2zf7G5b4Fk7tTraK9HC1DON4OBFaWyUJV/3m:BzDzP8kXd+7qda+4SqUJV/2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773212286, "uuid": "1ba24a3e-e667-457e-979d-7834710c361f", "value": 1361408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212286, "uuid": "6531999d-3ab6-48ea-a082-5092dd5f430a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdc25a15-1d22-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773217154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217154, "uuid": "f8fb0330-e482-48b8-92c1-0951e70bdc65", "comment": "Malware payload", "value": "c89b9903e358aafe00d646f79d94c214", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217154, "uuid": "19bc91ae-c7cb-4880-bcbf-a8e2bb6d3eec", "comment": "Malware payload", "value": "2f42a96f5746bdfa41ce044f3d2f3e62380344a5344fec8520811655ddc033b5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217154, "uuid": "c8e3ea2d-c27c-4373-a640-f2a2eed66c25", "value": "T13134C70AAF610EBBDC6FDD3706E90B0625CCA50722A43B763574D528F54A54F8AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217154, "uuid": "1d2f2ec3-3832-4cb3-8654-f24467414028", "value": "6144:p96natc5jbgq7ow0rs2kJxX7e3oEt6149L:pdmkxsri", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773217154, "uuid": "f7a339a4-b825-4888-bb2d-a24f47f29f58", "value": 241272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217154, "uuid": "1b9211db-9a18-48bc-8844-f58e83d12f84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "384ea337-1d23-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773217253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217253, "uuid": "63ffaa26-1cab-4e63-83a2-dcbe8808735a", "comment": "Malware payload", "value": "bdb87f1b171a463cecca428d09259603", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217253, "uuid": "137e7397-c889-454c-b6b8-bb3ccb3c6bff", "comment": "Malware payload", "value": "d7b7cc13e0994509efc054b12656499b29d78f1d97ccaf60aeadc15f9bf18985", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217253, "uuid": "8e73346e-389a-44a9-a675-20704b79dd27", "value": "T1D8173373725927F5D889EC38FD323A4882F2300DE19AF676447521EC79F5FCA2A062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217253, "uuid": "302c7618-055a-40c2-9afc-832bd391a2fc", "value": "393216:pBYLXtJaLbr7K7TCK6fX9RUL9jI6hqo9uMYbGvifxv8rU+h/PUEl0U8YYlbEm:YQnMOKWrUJfhZu8vifxvuhnUuDgH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773217253, "uuid": "3c1310ae-440c-485e-8260-0a2be4e7f86e", "value": 19180486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217253, "uuid": "6b6f18f1-83b2-4f8e-abd9-968a5af0960a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd89a059-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773217906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217906, "uuid": "904c91c2-64ad-4564-8141-af8d95d7f458", "comment": "Malware payload (Mirai)", "value": "2d73fcbee3b17c859646ffbd61635405", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217906, "uuid": "2ab0f6cd-1a9d-4dfd-bf57-60dccbacf401", "comment": "Malware payload (Mirai)", "value": "9d10014303682ef42af043574519091b9bd7cb9005b1dff41693ce4028738d6b", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217906, "uuid": "363a62c6-9d96-42ab-b670-4cff90c3ae3f", "value": "T1A8D3185ABC819F15D5D526BEFF4E528933131B6CE3EE7202DE245B2027CA95B0F7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217906, "uuid": "3a7074e0-9882-464a-9063-df02dd7a2ddb", "value": "3072:OQtqB+rvlhnpkjeVl4n+32xNIvuaU9uOi8IavBOfIf4S1Pq4TN7:7tqBKvlxpkjeVlMo2HQuaU9uOi8IoBO6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773217906, "uuid": "69fac045-01f4-4ba1-b6b9-1d897331146d", "value": 138428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217906, "uuid": "f5f83205-8e7b-4a97-8ab8-60bc3e589510", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee997879-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773217988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217988, "uuid": "e1c2f0c4-0438-4b24-90f1-7dfbf86b267d", "comment": "Malware payload", "value": "8ff146e391340e3d3fc04775f32dac14", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217988, "uuid": "5a10ff1b-1c0b-4009-a589-fa71b51222a3", "comment": "Malware payload", "value": "7f011984be6c4cb13764c23f739ebd883a05cfb28f6c25383618711993aac44b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217988, "uuid": "875c5fd2-9a39-447f-a235-0d825ebf285b", "value": "T1778423B5664F0FCEC39C9228E45A3956BD509ACB859C1DEEBBC614DF82BF38106274", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217988, "uuid": "19624648-5bd9-4204-9d20-1c7ce22e6698", "value": "6144:69VzYhPluT+YHSOBJbMGdHkKIGO5esk6LpAjt4UUFm3b5T5V0zkNduSy:ozGU/yOBJISHk8OcUijZxL530zsduSy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773217988, "uuid": "4025cc5e-e572-406d-983d-d6404b22315c", "value": 400218, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217988, "uuid": "c812e5c5-e9ed-42f1-8ab7-ebcc805aa7bb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2991608d-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773218655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "8733f818-d229-44eb-81bf-2014830720f9", "comment": "Malware payload", "value": "ba8138df7e0c33c568b8444323f7e387", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "73783642-0834-4112-99fd-6c988b002a57", "comment": "Malware payload", "value": "3fd08e667f1c50944a5594bd05cbed0272ae0b35ea4301ed60e96dab302ee6b8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218655, "uuid": "a7c7b7cc-793c-4a54-a1f8-156fabb7167f", "value": "T11034121E0619C3ABC57FD67D600C0B938CE24154922BD6B7980A134F46DAB66FD4EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218655, "uuid": "b379ed07-52e3-4f17-b17a-99da768bd048", "value": "6144:/OJtNHl1WMQ0k5U05weA8q04sHGDkiKNg:/at/4wk5lwbp05iD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773218655, "uuid": "afc9e029-b816-4436-99dc-9fae84b91b87", "value": 247244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218655, "uuid": "672de0da-ef92-410a-a33f-2662c780150d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1773218655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "53270b92-1be0-4784-91af-8bea5a7b33ad", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "662f2c56-b55d-43db-b733-034b351d2141", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218655, "uuid": "1536b3be-4e2c-45c5-83a5-2eaaba2bdc9e", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218655, "uuid": "4997ffcd-a0d2-453c-a503-f3934d4b1f57", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773218655, "uuid": "32237aba-c8d7-4a9c-85fc-25214ab4eb25", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218655, "uuid": "a2a80483-4a6f-46ba-9170-42a77feedd7b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7de86247-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773218658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218658, "uuid": "0a549e0e-c4c9-41d4-b232-a895124a9864", "comment": "Malware payload", "value": "e05954841c43c95b86a8bcb4219416c5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218658, "uuid": "de2ef57a-d8db-4536-9cb5-7db5ecbfc964", "comment": "Malware payload", "value": "79e42591201841a09d6f39fc58c5d3b9154dd7c21615bf1c43ad743ccfcdee0c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218658, "uuid": "7c2e30db-abc0-4d01-8faa-e7e08d35517d", "value": "T16B8533DC2F313B9EBE86CE770569BC1828255DD0805B2356633A7D1EA63A33617306", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218658, "uuid": "f45e5d84-3776-4201-9270-2679d335b4c1", "value": "24576:/YB0IqKL8T5Y6veNsS9syZHXCXje//R8Ilur1OQqRcZXivlg6xUjkYTSGOu1OVBj:/+qL9YTudpe6UwXcgIWtOg4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773218658, "uuid": "74101ce2-c334-41ec-ae3e-7b9df6df5561", "value": 1741645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218658, "uuid": "aab7c03c-9d1a-45ee-87fd-87ff16605fb0", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e89826d-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773218659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218659, "uuid": "1999c52f-3850-40c6-9cc6-f962f409016c", "comment": "Malware payload (Mirai)", "value": "16943468e6b7b3e48cfb58599ab7d9e9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218659, "uuid": "05361538-6972-46ee-9e0f-9f4db9ddedb8", "comment": "Malware payload (Mirai)", "value": "b79102af20e7f88e6fd4b654ca5ee1b4a48bdb75b32b6675468fa492a6fddc12", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218659, "uuid": "39fe5fcb-9f36-4d63-9683-62740d64d409", "value": "T19FF3F755BC519B16C6C616BBFF4E428D772A17A8E3EE3203DD156F20339B85B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218659, "uuid": "16ca1241-66eb-41b6-8760-500cee0ce37c", "value": "3072:HdDPNIdcabSkRwivkxuSjID9qupj4Le+5joka1JLU8r6:HpPNIdcabSkWmkxuSjID9qIj4Le+jo/I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773218659, "uuid": "2e8c5ff4-2f3a-41e4-87b0-4ef2ab2cb60d", "value": 169496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218659, "uuid": "75f8f31b-fbca-44d1-b8fd-093969efecc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3516e7c9-1d27-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773218965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218965, "uuid": "d92f80fd-71b0-4c3e-8903-e617c15fa71b", "comment": "Malware payload (Mirai)", "value": "671a930cbd211100e1c88d600188b35a", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218965, "uuid": "d084e463-ba24-46b9-9903-2415549e8b05", "comment": "Malware payload (Mirai)", "value": "bd6a93a6f1b3c9337dde212fbcce087dd94a8bbf492d232ac00b7abde9f675e7", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218965, "uuid": "5d6e559f-ab62-4884-aef1-ba928598f371", "value": "T1CB046C17B5C094FDC8D6C2B48FAEF226DA32F55D2138B11F27D46E262E4DE202B6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218965, "uuid": "36c2f3be-9f73-4aee-a0d0-91c1f812b819", "value": "3072:aXmwGNXqjD82DbNXkj2p4mw6HDB9qj6L4Cs2470xxxxxxxxxxxxxxxRxMxxxxxxx:a4Ngfy4BIj6i0xxxxxxxxxxxxxxxRxMh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773218965, "uuid": "f95ab063-8a01-4767-80d0-f38224ce4d1f", "value": 178248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218965, "uuid": "7023ebf9-185e-471f-a1fb-999a99c78342", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c807acc-1d27-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773219139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219139, "uuid": "9082db12-af50-4437-9c5c-6ba8f38f521f", "comment": "Malware payload", "value": "b1b6f9a26ed5f013964014d4d8a2226a", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219139, "uuid": "1735da30-3af0-4926-af9a-a7d3e1f1f14b", "comment": "Malware payload", "value": "8db1247e9b7455ede0d8109f260601706e2ca05ea2cca529f31588d41c22b9f4", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219139, "uuid": "c6c2915c-fc5f-4c74-a08d-183d279971cd", "value": "T180B633A061C18377C4422DB384D0AF8DB5B232A40B669FEBD5D519BA9F503D1D272B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219139, "uuid": "8c89f658-ff3e-48ca-8bf3-d54843f07a2f", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219139, "uuid": "0f95431c-e954-4c58-b972-70a095a5d480", "value": "196608:nfoq8xyfBeXiS7vV2Rjyiqzv1+8W/o0++3NaecDHXMWTqnNRaV8uN0MO+SN4KP:foq8xScZbzd+80o0j1KHXinNRaV8uN09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773219139, "uuid": "deeac4df-69f2-4b13-bcfa-d62e2a87e7c6", "value": 11393536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219139, "uuid": "2056c239-e0cc-4cec-b65f-457b865c1218", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b821a725-1d27-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773219185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219185, "uuid": "31cfafcb-59e2-4480-9295-58daaec8a85a", "comment": "Malware payload", "value": "a0feaefbe343954e61544f32827ccb96", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219185, "uuid": "444da678-90af-4af8-9536-04b557857e4a", "comment": "Malware payload", "value": "17d2b3fb0c1942c43588d26ba9aecd6f6a9a549f86a8bb4120865cfbd9caf137", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219185, "uuid": "b6b3e046-44cc-47ae-96d8-65716e9c139e", "value": "T1956733BB5212685DE0A7CAB4B0C1DA6150633D2C08B1124F62EF13D92DB265F6F7E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219185, "uuid": "fff216c0-7a69-482c-b5cb-fe15c6cb1f85", "value": "4a69501d065aecd17da3f8f42bc46478", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219185, "uuid": "ab3a7c85-eccd-4499-b727-98ac88098e48", "value": "786432:B+G5eaaDqy3rc/OlBy9g4aLpOQlqjfLZSZoK:fcrc/OlBhhLphlEfVSqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773219185, "uuid": "6468f19e-d71b-4e15-82a0-03cea751a111", "value": 30344064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219185, "uuid": "376c5457-c69f-4ee7-8666-9c60812e7c1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b180f2-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773219610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219610, "uuid": "76768ac7-d0ca-463d-8f86-1a413d5ab26f", "comment": "Malware payload", "value": "32049e0d2a9359b5f887ba8d066e66e7", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219610, "uuid": "b029ca0a-22c7-49b6-b39a-08b084a5468e", "comment": "Malware payload", "value": "7e78c82b18c6895aa736fe816bf141dc4d2363efe117f6f2af2b51e0de26f28d", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219610, "uuid": "37839ced-1205-4438-852b-1c67c5211d7c", "value": "T1E0A538E288B0FF13B7B61D1863745E591018263B0FDB0209B4BED7C67687DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219610, "uuid": "46c73cc8-bbda-4dba-9493-9abc15ba2aa5", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTx:m0eF4xaDjDONijDG8ZxFTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773219610, "uuid": "f0fc5136-fecf-4501-942e-381e207f3437", "value": 2219294, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219610, "uuid": "be8ffef0-fb25-4544-a804-3a1a4598a138", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d5fb581-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773219611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219611, "uuid": "60bcbeba-c900-4535-b63f-e40ce013e8b1", "comment": "Malware payload (Vidar)", "value": "730d705a72665f08fb2d8dddfc7e6443", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219611, "uuid": "f31a4165-b159-4bfa-93e0-1ead78a064a7", "comment": "Malware payload (Vidar)", "value": "1c83863bda00873d081eb525fff37080a4b262a9092ca00887ba56234b860273", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219611, "uuid": "ffc1e836-a42c-45b7-a9e2-d1ec9b04fe33", "value": "T1E9A56C0BAC9544FAD46AA73588B67292BB70B8080B3233D72F91B67C2FB67D05D757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219611, "uuid": "4d3330f6-8960-4f27-83f2-5cbc03000855", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219611, "uuid": "0fdc2d73-3d8c-42c0-8cb4-8d79d8637c2b", "value": "49152:zR2JFtXzphcQKV+cIPQu15jCSrvzdzAj:zEd7WVUoEdr7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773219611, "uuid": "1d92b2ba-1847-41ff-b1e6-05879ba2840e", "value": 2165248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219611, "uuid": "0b81a5fb-6761-4a14-97d3-e6c4420a632e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8a8fb1c-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773219615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219615, "uuid": "5c4ff255-ad1b-4063-abf1-a9b4eb2f175d", "comment": "Malware payload", "value": "8c35beb23fb035c9e3f1073e6fbe9410", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219615, "uuid": "62617044-6d37-4d7f-82ba-4e9324301e1f", "comment": "Malware payload", "value": "c96063524cc8fdc405ff1401f32f9a22e9f45cf5b8d4930a85cb18cb4507024a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219615, "uuid": "f84349db-f9a8-4241-9c4c-52c72653ec13", "value": "T16A25D0FA56575D9F8A2A0E65F40C0311DCBCBC9772D880B9AF454EE64DE90488CB4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219615, "uuid": "ef4fe643-72a0-4f01-9aaf-d67817a4b062", "value": "24576:TmI7CEUrBaOJVzVobbdZdNoRcm1rSV0HXv9S/NQ9tTK62:TlCxJVzVmlSRc0TK62", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773219615, "uuid": "5e5e6203-c9da-43fa-905e-b2776bbbee58", "value": 1003214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219615, "uuid": "59bf60e0-e137-437e-9ee4-9342266ef6ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d913ad63-1d29-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773220099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220099, "uuid": "a39824cd-efb3-4d36-84a5-14ed7d0dd36b", "comment": "Malware payload", "value": "382364f7255a121932147c5584fc3eaf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220099, "uuid": "962b63d2-31ed-4324-b287-264692f51578", "comment": "Malware payload", "value": "ea23c4e4410ead5694372de57424db6e4d9d1f651e89281611d7e4ba49f054ce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220099, "uuid": "fec5cdf9-ee77-41df-865b-ff3ba9a0aaeb", "value": "T11C423F2115C46033007AA19CD5AAAB4CFFC6810FD792CA05B6FC62EF6FF2DA1D9136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220099, "uuid": "d57ea715-f392-4732-98b3-8820ab53f5d8", "value": "192:zBl1qSj1MHbMAekzhLUWq/lpEstjOkspjHo7PNs2:cSuHbMAekzhLUWqwsB4k7PNs2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773220099, "uuid": "6e4e6687-16d8-4e1d-b5d6-952b082733ae", "value": 12950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220099, "uuid": "420b0996-9386-42eb-9ead-385ef7b9065d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dd5ef81-1d2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773220242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220242, "uuid": "23c4c913-d9a2-4ecf-a1ee-a083edfbcadf", "comment": "Malware payload (Mirai)", "value": "1647a598401616825a323005baecaf6f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220242, "uuid": "d6df60aa-22a4-4d93-898c-74a24b3dc1b4", "comment": "Malware payload (Mirai)", "value": "724930d0644542e600a23259b1a6d3cb12de34b68d3bbbb46d479048974da3a5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220242, "uuid": "7f7d05a9-8023-4d08-8379-1414a4b34135", "value": "T10124861E6E228F7EF768873047B74A31A76933D626E1D644E1ACC1105F2439E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220242, "uuid": "76b60038-235c-4d5e-b8de-d2a2a9b5bbab", "value": "3072:9XcA5jKo/9WgqX39F5kiNkRtMCJuTe++4lxc:9XcA52o/9WBXSikDJf++8xc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773220242, "uuid": "b4ebf7e1-9786-41e5-b7b9-261d0ea661aa", "value": 209404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220242, "uuid": "f8bd1780-06f5-4015-9e87-5089db6a0eb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dc5f2e9-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773220725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220725, "uuid": "ef69e6e5-da21-4550-90bc-bc02456f8bcd", "comment": "Malware payload", "value": "08ea0233b3ba855fde063a7d81d72b5a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220725, "uuid": "8b20b2e7-406c-4016-a631-611493fe7a06", "comment": "Malware payload", "value": "b6ca406a132a05fbdf9a3d25dc8cbe567fc1ef5bfa82de229842343720c9ac15", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220725, "uuid": "f94b6a12-c8b2-440a-af05-dacbf84c8fed", "value": "T1A124CEAE231BC9FB602DEC675C5414C6805E3CCE2E1579BE75E8BFCA2355E029E354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220725, "uuid": "80c78dcc-f73c-407c-86d7-76004ce65fb7", "value": "3072:zdZbAqoMr+L9aTAYjJIiw6uHb5ynnXMFbvqltyTpG+33K51qR6xYQfouaGYEzzNm:A6Gw7j+6+qnmy/+HK51rx1ouaTEzzN5Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773220725, "uuid": "63b73b50-9d73-4f92-b42d-2bdfd42b7d26", "value": 223306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220725, "uuid": "88f1f9e2-c1b7-4449-8811-c6deb76c64e5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a32f7b7a-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1773221297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221297, "uuid": "7a1976e0-28ec-478e-8925-1b8c70bf2518", "comment": "Malware payload (Gh0stRAT)", "value": "e8f5f7ca247b5b70ee3f80df6cadf8bf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "expiro", "colour": "#f40246", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "Worm.Ramnit", "colour": "#4de7a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221297, "uuid": "fd4beb44-39f4-4e51-be9e-e09e9ebdb598", "comment": "Malware payload (Gh0stRAT)", "value": "55866f0c5b53419c79d7be9b565e338091f4aa755a278eaca887f03ece544c7a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "expiro", "colour": "#f40246", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "Worm.Ramnit", "colour": "#4de7a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221297, "uuid": "dde782c5-3694-46e0-b938-a5ac56d024a8", "value": "T1A0F36A1774F0BBB6C34382751F658A3BB2E9E13CDD124993634B6B091F34BD28E6A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221297, "uuid": "d92f69d0-b589-4c7c-b07d-20cc6d7b4bd2", "value": "c8d8ab2105b98430234d0a20519aef66", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221297, "uuid": "38eb6f34-0a27-4134-b4ec-81f08f6cc3dd", "value": "3072:edlKPwx3EuRHSBtL7/u+YuzkTESlTmkYe:edlnx+7/u+YuIbI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773221297, "uuid": "ad0de991-308d-4aff-89fe-a354f403f3d4", "value": 159744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221297, "uuid": "6827b968-3e95-4359-b0ef-b3a241e8880a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1915837-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773221724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221724, "uuid": "8f18834b-f95f-4e56-a9d3-c7d0da37d7e0", "comment": "Malware payload (Mirai)", "value": "90ce9c072ff578a6b5345352e28c1f86", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221724, "uuid": "a272a9b7-7280-4a7d-bb31-e6220d6eb961", "comment": "Malware payload (Mirai)", "value": "80551c87db15d794c02974165e9a6086a5239f820831042e5573d49a26de9227", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221724, "uuid": "880d944a-8566-4f24-9178-b4e71eda6a63", "value": "T10B343945BE404E37CBD4627AFFED42CD732623BCD3EA7102EE015B25369A56A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221724, "uuid": "d13277e0-7cd5-4a68-bde1-ef137272a191", "value": "6144:ZJUyfsGme9ROLlRZp31272GkU6vVLgmRfMb5F69aCi0Y+aTY9QSw945LQv3Pl+xw:UyfsGme3OhRH31272GkU6vVLgmRfM5FD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773221724, "uuid": "666d89ec-5a50-4329-9a70-a90fcb0cfbaf", "value": 238008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221724, "uuid": "a6fd378f-812f-4d3b-a53c-c9b68eda25ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d07b7940-1d2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773222232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773222232, "uuid": "6b20bdf4-d6c0-41ca-9b1d-8e53cf63b3c5", "comment": "Malware payload", "value": "8778219f8913776f06b3d98cf88469cf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773222232, "uuid": "493349cf-63bd-444d-9bf9-2ac3468bce74", "comment": "Malware payload", "value": "4341e88cc8798d44a25d75f7ba833f82567f4fb427a26a272448ee347eca2a0e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773222232, "uuid": "16a387c0-2a0f-4946-8140-65af83c28fbb", "value": "T1CD34A65E6E228F7DF668C73487F74A31A76D33D623E1D684D1ACD1101E2424E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773222232, "uuid": "3e367ddd-dbfa-4456-9cc1-4e74caf00ecf", "value": "3072:ScnN0GE0z2VyBViN4/OH1hqqi3yEjf5cwFoXZoJsiBCAqY4mfNR0:SS9fayLj/E1oqiCcCpoBBQY4uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773222232, "uuid": "90bd1412-0a8b-4aa9-bee5-99ab1aa1bdab", "value": 237176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773222232, "uuid": "f69d1aaf-260b-47b2-878c-743565f4138e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccf2300f-1d3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773228239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228239, "uuid": "f155bdff-2f87-4e55-ae46-b6a5c2a58112", "comment": "Malware payload", "value": "c293c41a0f4bc72d21ee05b8deee9bfd", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228239, "uuid": "17352843-a4a5-4438-96b0-af5dffcd9a25", "comment": "Malware payload", "value": "e50ed2f9f7a89c944dab89234eeb8811db71158660fcb4d02ac0a65f6d1cdb4d", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228239, "uuid": "0e925521-b5d3-4269-86dc-254baa805a88", "value": "T13B139419927B11AE3507D8E03BD0278332D0316FD749E92C7FEDE2544F4ADAAC692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228239, "uuid": "416a45de-ad71-44c1-bf42-2b1d4dde57b5", "value": "384:e74uqrCczFlFB42eCkcFEFB4T3FcH8GmJt/Hd/TDxNclUeDFOKK1DUV6:e72FlFvFEFE3iH8GU/F3c2eDFTgDUV6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773228239, "uuid": "17f7d42c-b9eb-41d7-946e-d88d6004b1d3", "value": 42322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228239, "uuid": "55a21c60-0e12-4812-8e0d-c545fb40285f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3de2d1fd-1d3d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773228429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228429, "uuid": "f0b6260d-0e10-4453-9d73-e7e0c64d7296", "comment": "Malware payload (Vidar)", "value": "d9e4fd224f5f112ff42113fc8098bb16", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228429, "uuid": "39e12ea7-6bf0-410d-a554-b469df2a3401", "comment": "Malware payload (Vidar)", "value": "a6edec8bb8a1de71eff27deecd7aae78ef4514dc8e2ed3dd83aeaf25a7e4a188", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228429, "uuid": "323cdfe0-4fd4-432e-a30a-b20cf53f02ea", "value": "T10C242359FFC0B15BFEB69D71D162C2E304BEF3344B194B8BAA41E4C850F9576890A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228429, "uuid": "d684eefe-6ef6-4610-a781-20f325efd96e", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228429, "uuid": "d90e0bf2-e243-4c50-86b9-3e6dde5ed37a", "value": "6144:DEZxBLh1mxmcod9jCwBBBAhJJzqlSyAM/Kl:4BLh7X9mcbAL9yn/Kl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773228429, "uuid": "b655077b-f274-44f8-9e43-055587240174", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228429, "uuid": "b22255df-6de2-4bb1-93ac-e8f6fbd62641", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8469de-16a6-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773231860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773231860, "uuid": "f56f5bcb-a4ca-400d-8cc3-7aaf65feac73", "comment": "Malware payload (Mirai)", "value": "916a95bafbf319ef89c5d95128b77456", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773231860, "uuid": "159a7339-97fc-4df2-85c8-e96a09db6e6a", "comment": "Malware payload (Mirai)", "value": "11261321ec75bcde1aa101a0670998ee095a1c3927351ec047a2ae2c024c64a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773231860, "uuid": "75c5801e-aa50-4d19-9328-31a5bc08b1e2", "value": "T12C415ED7189909742CDDD9AB33BB681034D4D09B2BC5AF0F68EE38E4098DD85B8C4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773231860, "uuid": "d765a74b-fd3e-4876-b8ea-457014d5575c", "value": "24:vyGnDL/dLJLYWRL9LgoLRLlbLC0+MfnLAR9RG3RFBHLlbL1Lrchig:vyanpNJhgKVtTlAR9R4RFBrtZC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773231860, "uuid": "391d098a-fb40-402e-a0cf-b6f9e7c0f0c0", "value": 1968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773231860, "uuid": "afc74622-1919-44b6-96ed-3c7ede126e8e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e981100f-1d52-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773237736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237736, "uuid": "2695a25c-2198-4b83-930f-0a5b3a257721", "comment": "Malware payload", "value": "47d5e07e88b066ea06cfb48b859bde0f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237736, "uuid": "2631a444-a495-4902-abf7-72cfe008a3f1", "comment": "Malware payload", "value": "dc463c7a84a2b137cb8de7801d7ce94c393bf2cd366a04bfe4a58185595583b9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773237736, "uuid": "d911316d-b736-4ce2-8b50-c8f86bf45f15", "value": "T12393093174AF052A166F836E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773237736, "uuid": "94849cd2-805a-4dfe-af33-f117208e186b", "value": "1536:pZyp19S/uwMmAIa14oXq/INepeV7tb73WAxCJCStkb5fvBS05o4jrmiaPsCZKu6E:pUEIWzEStkbFvBS05o4jrkPsCZJ6Yx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773237736, "uuid": "fae4f591-3790-4c07-b9c7-12695b778478", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773237736, "uuid": "d068c961-d649-43ca-a8cf-9d8b76de0107", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bebdd092-1d54-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773238523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238523, "uuid": "43668ab5-72c5-44ec-9693-1fa87b4dffc3", "comment": "Malware payload (Mirai)", "value": "48ca394b27504e131526d27242d4fa5d", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238523, "uuid": "212b787f-9ebb-4b3c-8f7c-c181f2da0aaa", "comment": "Malware payload (Mirai)", "value": "2f94b3aef184e009a4a8a6c1958d44734a0ddf2f29807e2ca2500fb0dbfc512f", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238523, "uuid": "a7453d4f-f33a-4ce6-926a-61a469c33cb1", "value": "T1DB330272025F53B4E905E1700C9EA7C4F032B81FB9034AF7554971AAE63D6EB1F14B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238523, "uuid": "736731ec-32bf-4ad3-b076-67c2b9a3b2fc", "value": "1536:353lbRllzCmtHBCUdF+Vsg5JsuUQiQ34o:3J1LlDHjF/qJspQiQoo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773238523, "uuid": "22abc500-380c-42af-b87f-124968a3ded1", "value": 51324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238523, "uuid": "a34048e3-c9fb-448d-b0ff-fd3c3ab2d9a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3fba2a5-1d55-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773238935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238935, "uuid": "de9b2284-629b-4573-b2b8-ee0fbf57b0c5", "comment": "Malware payload", "value": "d791b5017bd32e819e15ba5eebc53d72", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238935, "uuid": "878d6e26-55d9-47b7-9b7d-df420ba666cb", "comment": "Malware payload", "value": "592aca59fae9dc1c3443ac7faefb7d49b868eefad944c9a8b79e3764e2951196", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238935, "uuid": "d7e17bfe-c04b-4f27-9f83-943a1c4bb046", "value": "T18E5413EF6C8BF2C8E25F89785C3F18E880A0D425775A57D39EA25693C4B4316C1F22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238935, "uuid": "9c22abe2-dbd4-4342-b9e4-74dda3c328e1", "value": "6144:0/MijQgkG6WgyP5a2tsf9KB25OW0h7gNkPC/FMrJ+4szGnrasrrr/4yqQwxIh1:EBjQgKeRptsMQ5OBh0SPC/FKAGr9mQwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773238935, "uuid": "2fea4b1d-9e99-4590-b757-f564ea8f2ee8", "value": 290697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238935, "uuid": "21a2fc2a-7557-4416-a087-1dccbe73a13b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d20ce957-1d58-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773240274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240274, "uuid": "b62f9585-5cd8-4c95-8bb3-2be4ef96e953", "comment": "Malware payload", "value": "949b4c873fa8503e336822b8db5572eb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240274, "uuid": "ee69717a-319d-461d-8bbe-e639f1156089", "comment": "Malware payload", "value": "46ce937c7b881be35e4ff7172d1280956ade849b114367e6887f3e984d48809b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240274, "uuid": "dc4ff7fe-9a3b-4284-afeb-791764755a28", "value": "T184D3F95F97BA317572178345F8A6773492ACC133DA424AE2FCB6D25C8FC126201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240274, "uuid": "ec26ec81-0e8f-47c3-a481-2b7373d5da1f", "value": "768:EZdapEbrTXlP3RNjcXscJGcz74k/tHcTwAl5HL5F48C3A40zJZhJgs:EapArrQ4k2wQ5HL523A4YPhJgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773240274, "uuid": "c412acb0-79d4-441d-8289-be6aa3c22ac8", "value": 141243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240274, "uuid": "c7b19dac-52fa-442f-85dc-5fa02c5eb983", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddbd9b4a-1d58-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773240293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240293, "uuid": "b97e93e0-657a-4c96-bf87-5d37cbbe2b8c", "comment": "Malware payload", "value": "3732eec02277b1d1d6907cf0efe1379b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240293, "uuid": "d3e52894-d0bb-4cfe-8f86-d35b1e913ab3", "comment": "Malware payload", "value": "2f57a09a34a980dfa935c132611857580996d4768f5bfe79b5110da722e8bfef", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240293, "uuid": "c2756624-5b3e-45ca-9449-9e6903193c50", "value": "T12382F124BAD56A247C71F0F0DBC744B8564953FAC4CD7E5C112B373592E1EAEB8824", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240293, "uuid": "791933a4-5d22-43f2-98c6-103f4dc47f80", "value": "384:4MLuzDjcizl6rKgx0g/RMOhEb3d4ZA+vyVmR0u7kxeapDVhPfpFGD4jLxdWrnk2:Z6DQip6RxrRMOOtcfZR07xewDjPPGkjc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773240293, "uuid": "a2668ca0-98b2-408d-9a31-9598428a2a41", "value": 19200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240293, "uuid": "c527259b-9f2e-44ac-be40-c694e76b8173", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70d18a2d-1d5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773241399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241399, "uuid": "37eea2e6-59c3-4fe9-ad33-e1a3009e7e27", "comment": "Malware payload", "value": "5170b65e8430bab6490d70868fb8dcd6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241399, "uuid": "167ea2d5-0ae3-4c9b-ae88-7e1abd85f8c9", "comment": "Malware payload", "value": "2c3aef44dc5ae06ebe2b02a31afde2332be64e192ff8d70eedefa7fa38f137b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773241399, "uuid": "0859b043-657a-4be6-aa7f-7b701d138a98", "value": "T1EFD3085F97BA317571178345F8E6673492ACC133EA420AE2FCB6D65C8FC126201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773241399, "uuid": "51e2025e-4d77-4809-9f43-1290f9065c12", "value": "768:tZdapEbrcXlP3RNjcXscJGcz74k/tHcTwAH5Hzy148u/F40E16hYTd:lapArIQ4k2wy5HzyC/F4BshYTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773241399, "uuid": "66a5ba7a-7e27-41c1-9c70-82c481ac54b3", "value": 141029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773241399, "uuid": "96dcb1b0-92fa-471a-8049-ad5ba160c9ae", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03d0fea0-1d5c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773241646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241646, "uuid": "6260ab7f-fb29-4a77-94b9-84f4628d5ca8", "comment": "Malware payload", "value": "f9d1e222e1e040f87152061afbafd6af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241646, "uuid": "37199947-b8b1-40a5-8542-731fcf48c89e", "comment": "Malware payload", "value": "edb068e2c7e45050e53e5600e057ad339e0edef04e562ea87c0955c5776935c0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773241646, "uuid": "f2ed78fa-83dc-4c1a-8a03-5d6f6b3c07b1", "value": "T1D78309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773241646, "uuid": "bda08b7f-50b1-4a45-a7d9-c5d1fb3cdbf5", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnUWaTVN/:XEKltp9txAX/yr2pbUWOVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773241646, "uuid": "d1f7f8f2-5dcf-424c-91f6-0dc0c2cf53f2", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773241646, "uuid": "ba0004b0-8e1f-44d4-976b-d64044e274d0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "893c22c4-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773244447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244447, "uuid": "ddaf3f57-70d6-4c09-b81f-956e23b519ce", "comment": "Malware payload", "value": "6f8c3e20eac190d11541ea57ee470d94", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244447, "uuid": "234b867a-c433-43dd-802b-f3237c254e19", "comment": "Malware payload", "value": "ac1684f4a0193d0ebc1c6e11dfba360d5b0457bbd06bcaf7ffcb9b9e870b6c3c", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244447, "uuid": "9438a01f-9a94-4f8f-99ce-34f7d6ffadf2", "value": "T122A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244447, "uuid": "6a58ea83-91d5-40a0-9f14-7a54d70723ff", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTZ:m0eF4xaDjDONijDG8ZxFTZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773244447, "uuid": "15c75dec-4576-48d0-8f57-d27e11f03a81", "value": 2156218, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244447, "uuid": "5d5f94c6-8818-4312-98fa-bc3e1cb22534", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e3f2242-1c25-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773244448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244448, "uuid": "ae2901ba-01f4-4782-8c55-4c65aa24b541", "comment": "Malware payload", "value": "e1b9c940514baa9932eb6d606d4d93a0", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244448, "uuid": "17b3647e-5bd3-4fcd-b8f7-e81fd1ead6cf", "comment": "Malware payload", "value": "959c5c5e8ac9084c8625253d856ee83e54b50756f4ae54ff2cb4b268d28f72b2", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244448, "uuid": "86ab34f5-073f-46c9-8470-3fac3ffd7a1e", "value": "T19CE57C6D2F095C73D3FA977159B53F6DA674B3212C53482B22BD21C9CA352A23E07B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244448, "uuid": "48b24449-1a0e-46f0-a303-4fc534f5ad50", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGB/fNAzrdQ2zSK:8UixbItdTrJoFVPMvXGB32zryySj0dlV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773244448, "uuid": "0bf44c55-e59e-47c0-8679-86d2f5f8dc34", "value": 3155453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244448, "uuid": "45dfd57c-c29a-4713-8ed5-dc4876406577", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cece340-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1773247808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247808, "uuid": "4d69c60c-4c89-435d-96eb-67ed7d692428", "comment": "Malware payload (Gafgyt)", "value": "a4e9eeb2e1a290871133012d0451f539", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247808, "uuid": "118fd5d8-079c-41ee-9b1a-48cd0fc08480", "comment": "Malware payload (Gafgyt)", "value": "a73387151a83153122cdcf3e42f444d95d93ae16fa6ab92489f35717cff9fe45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247808, "uuid": "2ac04b0a-42ec-42df-a301-ad3026ebbd4a", "value": "T11E93C709BF600FB7E86FCD3705A91B49358C641712E97B3A7A34D918FA4A60F09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247808, "uuid": "58a49f9d-1273-4323-8276-4b36a45581f6", "value": "1536:tYp2epspvLLhc+0MjgBiBWxsQiC83uR9zv94lByLG4hN+CHOZxH/e:2npCzgMBasQl6u/U94Oi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773247808, "uuid": "19ab13eb-61e0-4c88-86b6-b1f420bf518c", "value": 92644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247808, "uuid": "677268fa-af4c-49a9-8ff4-cb7c6f29249a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "330e6e30-1d75-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773252463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773252463, "uuid": "3023f156-c947-4758-b570-d857b1e7d31c", "comment": "Malware payload", "value": "586662f4de6511ad3911ae71529c5efc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773252463, "uuid": "b5b4991e-3f64-43e0-b213-5e584f2c4c32", "comment": "Malware payload", "value": "83a4529e7a82dd954690c915d6b0f02a6222d7f333a51fc9ab5ad66099c2981b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252463, "uuid": "1241929b-9a5a-499e-9cbd-570af4ca35c3", "value": "T112530755BD929A17CAC4537BFA5E42CD372623A8E2EE3213DE155F2132CB42B0E7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252463, "uuid": "195b4129-079f-478c-b17c-b5a576b8dab7", "value": "768:fq4OHoKVnm5eETi6QpfOTpYkOwEM0oOHhWE+5A+6vpNqC0enmTI5pAx+irwlDF6G:Sl09Q921Edo0AT6RwNOb5pAFyJR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773252463, "uuid": "265d404d-8894-4e39-b23f-4c1ae5f7a516", "value": 62688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252463, "uuid": "d1333b54-6db5-4ca7-887e-070b0d30ce40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d67f92-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255121, "uuid": "a3336b55-90a9-43dd-b60a-98dfae594665", "comment": "Malware payload (Mirai)", "value": "1fa4b5b9bfc1f9e68a7c9674c3649117", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255121, "uuid": "850745b9-61cc-406b-8320-b14da753de6e", "comment": "Malware payload (Mirai)", "value": "fd0cc0e6b2972930f4ca1a2c366287377262c2828e3131809eab665a0c278526", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255121, "uuid": "41d5fd1e-25b3-4e25-87b5-8ac8a9838603", "value": "T1EC263A57FC9155A9C0AED230CA6292537A717C485B3023D32FA0F7382F76BD0AAB97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255121, "uuid": "f7abc933-8cfc-40ad-8794-7749fdb16941", "value": "49152:uSX/A6wuN9W9Uh7u6hjJQkI2LjM8pzkXT5EUX4AOv2EKZyhBNLK8pl:t4nU9W9U9PC2LjMcoEUsvY0KE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255121, "uuid": "deeb0795-300e-42a7-b6b6-50bf1a51c6d0", "value": 4841624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255121, "uuid": "20f4f31d-4390-45a5-bf58-6279afce212b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b9a030-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773255304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255304, "uuid": "e911442d-0c26-453e-a2d5-bd54ea90dbce", "comment": "Malware payload", "value": "c9c6d72ee6da8c2f4e3a1aa505e6fd64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255304, "uuid": "8b73bf2c-1c8f-41c5-bd4c-193c086d6296", "comment": "Malware payload", "value": "65e37468d4466f5775b82269f74cfa6de5f54e4b338588c4c6c68fa45e009698", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255304, "uuid": "c890641c-0c50-41d7-8e3c-a8b7dfdede70", "value": "T11A767C07EC9595A9C0EE923189629252BB71BC485B3023D33F60F77C2E72BD46E7A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255304, "uuid": "dbe04dd8-b3cc-4910-bc15-97294e6d7304", "value": "98304:tq9W6lcUJFqqEWEhl6HM6XktANC4DFSF/IDy+mMK53aY/lQ:ucUJFqthECYS1F+PKIY/C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255304, "uuid": "3df7fd87-19e2-47cc-9e51-517a09d929f7", "value": 7315868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255304, "uuid": "73ebeb34-0f19-430f-95a8-492826151824", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8960ee6-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255317, "uuid": "ac77ee25-805d-44c8-bfca-708bcd85d4e4", "comment": "Malware payload (Mirai)", "value": "41e6a22ec0c82422a1735a46d98fe3aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255317, "uuid": "817dd810-edcf-44fc-adc0-c28156cd6795", "comment": "Malware payload (Mirai)", "value": "0c6b4044ccdd355bbe74aa9c512f163f5087f245219777bf36e39672ffb4f123", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255317, "uuid": "85c9a9a9-9b0b-4b50-82f3-f31f330d9bd3", "value": "T1CA734B1332280F57D0534AB014FF5AF087BAFDD119E2B245A51EAFA84636FB62845F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255317, "uuid": "6c2668dd-c3ef-476f-8b42-69d10eac39f4", "value": "1536:ZlA8ruppHFxyEE3Mh9dLQ5OnxXvDqxu6toNGq:nzq7zEI9txtDqgyq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255317, "uuid": "5f61b915-df7b-420b-b270-22f83ff3a271", "value": 78855, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255317, "uuid": "9c68b1d9-3b20-4477-879c-5adef4a2c5c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2dae34a-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255334, "uuid": "0f9d98de-7ab7-45bc-85fa-cd6f3aaa41be", "comment": "Malware payload (Mirai)", "value": "32ce3f32cc2bec1899104ce6ff3f868f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255334, "uuid": "4e410529-c40d-4648-98d9-171115f96784", "comment": "Malware payload (Mirai)", "value": "d63aa2bc51f1750aca9daee281834e10780246fbf3a4ff54497ba59345fde531", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255334, "uuid": "159d5264-137b-48d5-a1c0-a8b76a131b65", "value": "T120A32C0178428E23C1C1177ABAAF455D3722B7F493CB7312DA246FB42F8369F0E6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255334, "uuid": "4f052009-5806-4182-9df7-ce91cbd515fe", "value": "3072:ti6kpBAOZJXS8M5ecdCqnuGU7lWynxMzLroJ8C:ti6kpBAOZJ9Ce4CqnU7S8J8C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255334, "uuid": "fe09b788-1f6d-4b31-a155-c5e78b4b8d47", "value": 101950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255334, "uuid": "b063b831-c233-4cee-95c5-52597b2ba83f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edca08fa-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255353, "uuid": "0cf1b414-ed81-4f5b-820b-874212ec77be", "comment": "Malware payload (Mirai)", "value": "7b1ee80fdef0678115778ed6423141d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255353, "uuid": "beeec7bd-3470-43ac-be07-ab09e5b1b98c", "comment": "Malware payload (Mirai)", "value": "6282ca587326fd593279a91527bbc1babba7fc42aa2bef50054e3f0ec945877e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255353, "uuid": "127863ac-fd10-4db2-872e-fed09061a169", "value": "T16E464C43EC9555E5C0EAD2318A729253BA717C496B3523D32FA0F7382F72BD06AB87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255353, "uuid": "51773615-7ba0-4294-8c6f-1097f9bce9b1", "value": "49152:1KFI+hSpgxDvG7A30oVdhnQmvX+qshIGQIs+UW5Eeei3hfYgJRcjRPKOKDKWrGnP:1mYg5DhQmOq4IvKI82Iq5Eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255353, "uuid": "7878bd9b-1b3a-4483-9d14-c7b145f41417", "value": 5697720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255353, "uuid": "c123a229-9e4a-4870-85fc-1213ed2fd5aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4e1d37a-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255365, "uuid": "fcd77df1-616f-4fa2-bb15-1a7cd98a0997", "comment": "Malware payload (Mirai)", "value": "5655d62aba797d64ebd6962897df2d9d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255365, "uuid": "dd6f537c-d6ce-4894-8c9b-25efa94387a0", "comment": "Malware payload (Mirai)", "value": "d501faeb74777316a7793e946b65bb42192929dee76c9305ddb2617ccc8f5aae", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255365, "uuid": "35a5a578-61db-4a41-b320-f359da384096", "value": "T1D8831B41B8818F23C1D117B9BAAF459C373177E893DB33069E246FB42F8259F1D26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255365, "uuid": "ca77108f-cf9d-4fae-a3a4-bfafb5f2d1dd", "value": "1536:FFpJnFc/zQXZ4C/OyEtDuU55g23yXTkvpUSRFyes6tXX3F7FH8TPPrHZ:FFpJDZ2ijkmMFyescXXbEjZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255365, "uuid": "e801a592-be29-4d71-bd80-1087d382bf23", "value": 88039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255365, "uuid": "cc6f7d22-1667-43a6-9821-1a3339b87a01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0053e7-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255382, "uuid": "7c69aa69-5e19-4aa0-82da-d1bb09dbf527", "comment": "Malware payload (Mirai)", "value": "8c9399bba4666a96e9a093a11a154ac4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255382, "uuid": "79b907b7-16df-4c16-b591-852ff4a94aa9", "comment": "Malware payload (Mirai)", "value": "488a9c4cc84d01f7a891ed6757fcfc42c373e214e01efd7b33b7fd3caf31dce8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255382, "uuid": "604569ca-5211-4040-8dd5-fea47a807670", "value": "T11F734B13F9569EE6C0834BB816E38EB41F63F4894B132E776658A9F404439DCBC19B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255382, "uuid": "a7bbf183-eca8-4721-8bcc-5dfe5341d10a", "value": "1536:OaSMSH9dHLOfew3qDnbRPSrgCQk6LkEGj9wu:OMSH9weZnRPSrgGYkENu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255382, "uuid": "1f10c701-d22b-471e-8c86-266310d0f3b3", "value": 74448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255382, "uuid": "3e649d77-514e-4d54-9d6b-a5eca4391d27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08449cb6-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255397, "uuid": "5df67e6e-4520-47a1-9663-645aac283560", "comment": "Malware payload (Mirai)", "value": "270ceeda1b94c5e4add194f02e9b3771", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255397, "uuid": "48ba34d7-0852-470e-94d0-28f588231536", "comment": "Malware payload (Mirai)", "value": "7daeda0447e5e118d7ebd4c35c7fe5b5bbbb968923ba9dbcf7cfaf4cf9249bd7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255397, "uuid": "c7f90b30-37ef-49ce-bd8c-f4a41c8dc4bc", "value": "T17E733CC1B643DAB3C85316B421A3EB334A31F8BE176FD943F36CA9B6AD4118970076", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255397, "uuid": "66c6eb8f-3bd5-4863-9215-f3fb270cb78c", "value": "1536:lBkFSGAoik5skxqMEvsrWQdfkobqY4/+lQtUxvms09t5vA:l6SGAoik5skxqMEErWQdfZbg/+QmosYA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255397, "uuid": "e23de25c-aab3-40ba-a356-2f4f82893b5a", "value": 74201, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255397, "uuid": "03a31b48-24a2-480e-8f21-58add2857622", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1112b6da-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773255412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255412, "uuid": "24f5e278-920d-4eb6-b217-6c8980fb1751", "comment": "Malware payload", "value": "f044908d3982a02bf7b68718756ec392", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255412, "uuid": "1bc4e37c-4f21-4d64-9ed1-f4b6b9f6fc1f", "comment": "Malware payload", "value": "9f08c07caca26eea95e718ca772535fcc3a061e71fea2ea160da039a09fe8fb6", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255412, "uuid": "a719e101-4234-453e-a5c1-2d5d6d5a2870", "value": "T110115CCE65623E7FAA344F3C71B34630600D86D8A5674796F68A08364ECC7427A1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255412, "uuid": "8fdeda16-cb57-44de-b406-53677205d7ec", "value": "12:xVI7LV1auEac+ViNIKPjVPp/K1IvV73cRKV3abYViIJ5VH8foyVapUUVE1vVYJ:o7dINIKb/K1I5duQh8fo/Kn4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255412, "uuid": "c44410ff-f54b-4ccb-95ea-af44ed6dcf15", "value": 857, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255412, "uuid": "53cb61b9-8c2a-435f-8326-726810daed55", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18eed2e4-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255425, "uuid": "e3d10f5d-3e4c-42b0-af7e-1669e27e0327", "comment": "Malware payload (Mirai)", "value": "6d3d7134a9501fd1db083c80e359aab3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255425, "uuid": "4c1cc8b3-ebb4-498a-aecf-63de25683828", "comment": "Malware payload (Mirai)", "value": "e03b5c0d2ad0dcaa3696ec9dcd407297be2ddf8345115a06ca66beefaa8c29da", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255425, "uuid": "72899fdd-5f1d-432a-8e5c-26726c339893", "value": "T12B831B01B9828F23C1D1177AB6AF459D373077E893DB3302AE246FB46F8659E1D27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255425, "uuid": "d267dd7e-e440-4751-aa41-62a3c359a2eb", "value": "1536:5l+on75djsQ+xoUQlLjJFZbOTF8eTkvo+XPOAhA7Ob6tXAx9IoKD7YFbrHZ:5l+iLtXOp8YkPXGAh6ObkXAfI4jZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255425, "uuid": "3f2e31d8-c936-4951-9385-0d55796cb258", "value": 87911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255425, "uuid": "76a74aab-4a3f-4739-8e21-3b234183b767", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "209c583e-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255438, "uuid": "42736da0-ae1c-48db-b23e-efa8dcc1d1df", "comment": "Malware payload (Mirai)", "value": "7486a2f973dcbadfa581ec12d1a65a26", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255438, "uuid": "577d99bb-a006-48d7-b348-07c7e0795391", "comment": "Malware payload (Mirai)", "value": "5f4d4fd589421bcf95b5b6b0139b7a3321139b86c58463b1456eb2c36de33055", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255438, "uuid": "b7e55dbe-4b61-4e27-9f5e-e11695788d7f", "value": "T196A3C81E7E15DFBDF659C23047F78E31964437862AA2D142E16CEB101E6138E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255438, "uuid": "463f5f4f-d1b3-4689-a920-db3e77c00c08", "value": "1536:8bG/vWi5MMRtknUY0UlTVA9qsFg05JniNXLUlhmOSK0nE62K:87WndPUjA9qsFg05JiZUaOSKsEVK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255438, "uuid": "ec4d8a67-b51d-4727-aa5f-01274081afaa", "value": 100543, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255438, "uuid": "3b2541c2-f6c0-4fa3-89d0-54a30c0132d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b3b5510-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255456, "uuid": "a223f5bc-44f5-4653-8bfe-9e08d8d6c67b", "comment": "Malware payload (Mirai)", "value": "1953881d7dd194599fb796ec1aba4046", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255456, "uuid": "02355478-7db5-491b-ba78-85ae9ba14738", "comment": "Malware payload (Mirai)", "value": "80c565d50769670a5ce1f18bcfec4af99ffcf89a964d0119eb7c66c8f28238aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255456, "uuid": "eca6a548-02ea-4566-a44d-ed4a2ff88d64", "value": "T177733B69B402DE3EE80BE6B944D70F24BB217B954B830B16A266FDE329332C47D15F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255456, "uuid": "2a6a2e2d-de1f-430a-bf40-09bac38628ee", "value": "1536:K4Ptt1375brQE4KDuIzSMWFtZb6eRV87Ka8Fu:Kytj9YpHyBmB6cAPou", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255456, "uuid": "d0e43617-5d03-431b-85c1-8f654f4c5fa8", "value": 80295, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255456, "uuid": "004b2c64-1455-416a-909e-42f4c36f6318", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32f522f4-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255469, "uuid": "4b135035-cc71-40fc-b07c-a81caaf57436", "comment": "Malware payload (Mirai)", "value": "2e21f572f058d2b8a4c5bac16e25180d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255469, "uuid": "519f914f-f2b5-4c5a-8308-9173a5d94ded", "comment": "Malware payload (Mirai)", "value": "23b724b8eaad36d761cde6cbd6b545051d2dae73b1c2259d63081e59f1459759", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255469, "uuid": "37374a4f-f1ef-4c03-bc3b-338b5442988a", "value": "T196A32B12BB514FF3DCD7CD3705F61B01288DA82726A62B36B534D868B61728F2AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255469, "uuid": "c9a70016-5465-49a0-bfdc-e91c548dd2a4", "value": "1536:7Il1zyldzJMU39umT3ZuekUDMLZ5gQdL6sR5kICK:7Il1zyldVMc/MLDBT2K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255469, "uuid": "b81a7ec1-caca-4f07-a1c5-e1dad491a468", "value": 100543, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255469, "uuid": "3c7c6806-d33e-4780-a883-a1e39b92d1d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b0012ad-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255482, "uuid": "d6e743fd-7b79-4914-8adf-114e91dc2216", "comment": "Malware payload (Mirai)", "value": "4b34c372a4510688429dd078960c9672", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255482, "uuid": "2c1cfdcc-b5bb-4275-835e-c9bce8d13ef1", "comment": "Malware payload (Mirai)", "value": "fc3ec0b158121039c730d6e9d173b240c4ce8c76e22d393c63fa29916dc44c3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255482, "uuid": "b17a8f35-bca6-4e80-b7c1-71c41699d7ad", "value": "T1F9834B13B94286FFC086C6B4179BA9359C2374BE073AF3937794FE662945EE01D1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255482, "uuid": "65509af5-4957-4966-9c2b-641491ffccde", "value": "1536:eRxQUxdntAvYa73UCgYkWEu7jRdZRK3oaawirJN07YdXWzEGeganH+H7UwH8kSbc:qxpbnt+YaL7WTu7jRdZRK3oaawirJN0N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255482, "uuid": "b27a3579-2bb7-4aea-8feb-3f4d5ff18478", "value": 82964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255482, "uuid": "d140f495-65bc-4630-b3b4-fdbf4e73cf34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e6e42b1-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255488, "uuid": "ad88a767-8e5e-4634-97c1-8926084f3fe7", "comment": "Malware payload (Mirai)", "value": "c71ae7e0dba33330a44eff3610cd5f0d", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255488, "uuid": "777ad2a9-e3cc-4c22-a9e2-4c71e83fdd57", "comment": "Malware payload (Mirai)", "value": "bbea4558c491383f8092c74fd0cca234014f3b7d49c448534d22e113ad4776fa", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255488, "uuid": "c3cef6c0-3b1d-4cfd-bc22-637981fa35a7", "value": "T1B5E37B87F7064CA2C9920BF94A8B4B8C6F7321815F5BD7D33D1D26381E666CE5D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255488, "uuid": "2c2cc72c-6fc9-42c4-895e-aa365015d516", "value": "3072:YeUSBYwOjst2fmwGA4eegPYqwnrrAmIG99:YZqZSJCqYqwQmIG99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255488, "uuid": "82951b53-31a1-4df6-b1f8-205140840260", "value": 150924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255488, "uuid": "74369cba-9230-48f0-860a-7a62577e2296", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "414a2d51-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773255493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255493, "uuid": "1c1d1c59-da28-4adb-8c21-049f151e367b", "comment": "Malware payload", "value": "f23113899eced4521c82e6fb0c25c0db", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255493, "uuid": "1596869a-148e-4725-95cd-62bc29d209fa", "comment": "Malware payload", "value": "cc42bbefd45caca5a4fb0e772de8e51c0d3cccbfe4c7b645e007bdc2dd701ad6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255493, "uuid": "648f42b1-0413-4563-ac70-506bdae165e2", "value": "T16E566C07EC9115E5C1EEE2308A729152BA717C486B3523D76B60F7392FB3BD06AB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255493, "uuid": "8957d58f-f585-409f-ab05-735b830238fa", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255493, "uuid": "c8251629-73aa-4b75-85dc-b66f5d0f8c25", "value": "49152:EXzj4PB0kRwy5Mslo9Lnu69wS3XKpM+LDeaswoYjZjMehOwKeK9KE/bUiop85E:EuuLDHKq+vhIDzUiopuE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255493, "uuid": "a0d32179-3085-4ab1-8400-9d5d63cb08df", "value": 5884416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255493, "uuid": "bed9fcf9-a399-4abc-b4ff-79daaeb1b198", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47f1bf73-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773255504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255504, "uuid": "e3357f6a-b14a-40d8-baec-e1c330cc21f4", "comment": "Malware payload (Mirai)", "value": "bee775de58f43f772319da25691e4702", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255504, "uuid": "b528aa8d-fc9f-44a2-bdad-5e2d359cb5a8", "comment": "Malware payload (Mirai)", "value": "53d961fa9db058797aad46e72508abcacd950b09a65390acd373991a690a1fa0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255504, "uuid": "c3626be9-0a30-44ea-aa73-7f02172dce45", "value": "T15D834C317A762F27C4D6E5B511F7473077F1AA8E1EA6C10ABD312E9DBF116802806B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255504, "uuid": "d0363296-2e49-40db-8cb1-4898e7a474f3", "value": "1536:wkrfIoQZLgR/1yBO9N5/TC7G5s5tXNvQdoE96Z/1Ggvr:BrPiG5EtdSoakr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773255504, "uuid": "6319f377-0087-4249-9d4c-44743f5de536", "value": 82657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255504, "uuid": "3dca9e1b-8245-437e-90b6-5854731901ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35caf14d-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256333, "uuid": "621e89ec-1129-4f4c-830a-e8653667de80", "comment": "Malware payload (Mirai)", "value": "6dcaebeedb039a560c26478092e2c55d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256333, "uuid": "ad64ed9b-2550-4cc2-a3ce-187f30d082f2", "comment": "Malware payload (Mirai)", "value": "3d0521f20ca2515efae65c909f8591205d6d207b5a2a36f21c73960409206a81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256333, "uuid": "509021b9-f1d8-4146-b330-601e5838641c", "value": "T1CC735B22BA751D2BC4D4A87A22F30725F2F2479B25AC8A1A7D710D8DBF3165032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256333, "uuid": "bcad6aea-e771-42ad-9670-be22d29fbb4f", "value": "1536:mQMSZZm4fVFd9BPziJnHQ7jtEeCNM5UeWzQSkWtgWG:DpzHzHjmpN8UeIjG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256333, "uuid": "948e5cda-c27e-40a7-aa7c-08d54ca134c3", "value": 76448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256333, "uuid": "3cfdbf9b-9fc9-4287-ba10-0d9e94653495", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35cf98ac-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256333, "uuid": "c6e50b79-d623-4eb7-b65b-d8143cd966dc", "comment": "Malware payload (Mirai)", "value": "a7bd8b3f513e9c945f89405cbfe32c4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256333, "uuid": "485e9fdc-0513-49e6-8469-45cf9bd30015", "comment": "Malware payload (Mirai)", "value": "8d074bfce876f4c76d6d71fa6f7dc2e4a7343b74530f877272a6a82b11e23aaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256333, "uuid": "bb91d939-646d-4b95-8c80-d148b19fca3e", "value": "T1F9F2F1962102EFB185F55CB6A91981452AE00F7C70FBB2B772354E89E2874433E797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256333, "uuid": "53c649ee-00c5-4aa6-9c49-bc23a60ac057", "value": "768:Ps8gOvvs+q82wwPweu0ytWXFKiMgTF2LOGylZBDT/crDhMou9q3UEL6k:Ps8gOvvTYwWlu0ytWRvTF2UP/crDZTLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256333, "uuid": "45b0392c-6f2f-4fd6-b6ee-f350fcd5a71e", "value": 37240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256333, "uuid": "f77ef4eb-fb47-4782-882a-045f2edf7da5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "370ee0ab-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "cd204910-a44f-416c-8928-1b5e06347316", "comment": "Malware payload (Mirai)", "value": "cd755fb7ba8a95535e6d86641810d8dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "b934dba1-6487-4c51-8c1a-793ae7a7c90b", "comment": "Malware payload (Mirai)", "value": "8a9e838fd4f74802a8f960b4994644c284fc45d4a75e51c78cec2d95665f0011", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "46894d95-2abc-4125-b021-95445ee3c756", "value": "T14BF2E1BECE50D80AFEAD19BB425E0BB345947091679A4788A7024C9CF478E467C8E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "888e88b6-e074-4000-9d2f-ee9c6b9d0405", "value": "768:Bcic7wjLhOVP4kGcHBbkQzHuxhfpASwNJWsPNW8:Wqcp4NcHBbZruxhfpAXW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256335, "uuid": "86e5fa43-733e-4d73-8a08-7b7cd24f00b7", "value": 37160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "643d3af4-dba3-4ba7-a1e2-9a6c1c3a8112", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "371238ac-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "d058ef4e-3671-4a9d-b059-53c5aff09886", "comment": "Malware payload (Mirai)", "value": "ee7cc51dc39d2b9ea48a078d807c0449", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "8fe961f4-f0cd-48ad-961d-a4a3b805d222", "comment": "Malware payload (Mirai)", "value": "bebf0f7bd8508919d77b7ba490c6518c5d964b14c81a1895df38beb252f8d59c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "2bfd1c24-e47e-4312-b564-7d68b149d993", "value": "T15682CF7125977E21E0B09E35C73DCB9E922F4A76E5FA73621A004731D98018EBAF87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "ce761c32-5793-4262-a283-b6b31ccdd84a", "value": "384:9k4/Sf0BYVZ/KyXbtHGRRGqbDHG7rxIgHhymdGUop5h4G:9l/epZ/fIzm7rhHs3Uozp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256335, "uuid": "ec69a27d-9033-4e73-8a0e-63be1e9e2bd4", "value": 18048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "4e47799c-a5ae-4095-9a5e-2628ddd9659d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3716ac8b-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "284e5fe5-f7cb-4a5d-9c60-9a218f3d1f9b", "comment": "Malware payload (Mirai)", "value": "25a07488e1cbfd099dbe44c3a34d3078", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "f42e827a-7a4d-47a0-8573-1816f4b47c87", "comment": "Malware payload (Mirai)", "value": "25a52e10310948461ec0f33e833cadc6ce5e6a27819c3046c70ab8ff56793eab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "e333a862-2741-4809-804e-fe2c98944ed8", "value": "T1677329DBF800DD7DF80ED77B44530A0AB270A79106931B36635BBA67FD321A55822F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "823f59df-e4e5-4cd6-b069-a7aa1a1288e4", "value": "1536:z3OL3wr34Qu3EhvOy0sxom9XFH4ZWp6wtwb48FyRXFORZkRawHUzN6NzbotcuObI:z3OL3wr34Qu3EhvOybxomn4cp6wtwfyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256335, "uuid": "614332e8-d432-4a0f-8924-a8b2d31a2633", "value": 80340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "0637bff1-09e8-490f-8b25-568a58e6d5a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "371a3f1f-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "c8655694-d682-4287-9964-b55a3b3871a8", "comment": "Malware payload (Mirai)", "value": "a09ad21419eab90a8b94c7ebf072b368", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "c879812b-1a5a-4602-b67c-7779b3629b99", "comment": "Malware payload (Mirai)", "value": "058bc4b2ede9d6b4b2dad5fb5ae06db271d3d9cc655ec73045cf6b493e88c24d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "945ab4b5-0733-4e46-8232-bd8b6ded56c2", "value": "T1A4F2E125B08B3AB1FA490C71FB7903EA57D01EB160CB76610AC28B64258F51B7AF56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "6bacbbbe-b6a0-4d0b-9293-7307138ee068", "value": "768:aa8LMCvVxSCNhwU2NxRmN8tZIQrwpyTuIT6s3UozH:w/90C72FxtSQrw8TuILzH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256335, "uuid": "e0fa21eb-6eb5-4a34-bc83-6305e6f208dd", "value": 34732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "8dbdec8a-37d1-4384-a0f9-04826048a740", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "371c62d8-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "a8c564b4-d016-45c6-b2f3-0881c3249ab4", "comment": "Malware payload (Mirai)", "value": "4a63fa19be33b2bf7c856ea298c1e99c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "9055d62e-02b7-4c08-9aca-ab3780d409b6", "comment": "Malware payload (Mirai)", "value": "d7092342d45918a975d1a1b1cdc6142eb4084591f2e796c327214ecfb34566fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "cffdbe02-3d1a-431e-b615-2653da02fe7a", "value": "T13553AE77C8396E64D25581B0B8748E792B53F88482571FFE1A99C27A8047EECF6483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "45dde502-6a7b-4cd6-a4a6-1297bf10fc52", "value": "1536:caCwtuAPFqcgdEcM5KU3AwHup+CSXHld5Zo:c58PMcgaNAUHup+5FPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256335, "uuid": "b386c239-10c9-412d-8171-48f0b79b6584", "value": 62948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "647a81fb-52f3-4818-b82e-eb325e33fd7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "371df8e2-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "4c01724e-f747-4e1f-ab14-006aeabcf10a", "comment": "Malware payload (Mirai)", "value": "48e047eed42bdd83ab8bb123753808ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "4f7a709e-4bc8-496a-aee0-8967f6ce1eb9", "comment": "Malware payload (Mirai)", "value": "b395d3403c5a16893367ba8bb132f60bce1c4d13fa3ad093d2fece81973c63ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "f37e41d5-a9b0-4dc0-b315-fea8a67b83fd", "value": "T1A7F2F1FC2B1703D9E6754DB1AEEC43D15CE90FF31982AC42BC22229BEB46D88705B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "95ee92cb-e76f-4da9-8cb9-6a57708630fb", "value": "768:alWqYyhC5YjwTt97/EFMw7C0A7rluQAJQEhvJgGlzDpbuR1JQQ:Rq+5YcTtdMMg4rEb7VJueQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256335, "uuid": "406dcca7-c412-421e-8351-37623b1711ed", "value": 36120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256335, "uuid": "bdc0937e-8a3c-467f-b07a-1a778d5121f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "389fb42f-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256337, "uuid": "06aa0b5c-d2be-4b73-a242-7473395808a2", "comment": "Malware payload (Mirai)", "value": "abc08b18591b728ce89067f1e1deee11", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256337, "uuid": "280142ce-c41f-452c-b855-b9f94f43cbf2", "comment": "Malware payload (Mirai)", "value": "20e9f1caef52c938ab3509af0eb6fcf7d3c39202c907f0ec76f78dbd7331ed3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256337, "uuid": "27db53fe-d2e2-473f-8ed3-e905bfd9ca75", "value": "T1114302BCE6E364F5C1E19074CF3E48CF9B714579936A045A62C6446C4BC29877BBC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256337, "uuid": "b343adf1-063e-40c1-a8b9-b583d8b253f3", "value": "1536:GccRgToi/makIfyS5Dup1aKgfalLX5yfmDVRty25mH:GLRgThRfyCO1CfalLgfmjg2cH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256337, "uuid": "e1ed4175-b2a8-48f1-80eb-8f2de7ae75f9", "value": 59076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256337, "uuid": "be008020-8875-4a45-aa25-426951090d7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ceca994-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773256398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256398, "uuid": "186c58da-2826-4edc-b5bf-1782b60dfca1", "comment": "Malware payload (Mirai)", "value": "77deb35d23ad7982204675d68b1ebb7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256398, "uuid": "98d98b91-01cc-4573-9323-7663584b281d", "comment": "Malware payload (Mirai)", "value": "e965f80d8e7e41432b4de49b941cb73fc4df1b1f5ef2b640930f5d065e337ef8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256398, "uuid": "bf6e7f26-5d76-4429-8f3d-e5d4c82e18bf", "value": "T17DE2F18A88D8AE0ECB6553BC956EB780FA15A5A42F5F53016ED5CCC2A8033F5F1319", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256398, "uuid": "4abd6c57-79fa-48ec-93ca-182101dd55f7", "value": "768:WBbVkTrCrl546JCSVO0smsL0AjDTK1xtltOn:KpOADsLjPK1xM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773256398, "uuid": "1c97fd25-96b4-4882-870e-1c1724835602", "value": 32276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256398, "uuid": "82a79eda-845e-46c1-923b-bfbd11942c21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc3161b2-1d85-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773259672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773259672, "uuid": "c60926e3-10d2-48f4-bf20-c338f6aa2f1b", "comment": "Malware payload", "value": "5e5d40f22e9e2491602eeecc807273e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773259672, "uuid": "c77da70c-c771-4bc3-8b40-e46507dd0538", "comment": "Malware payload", "value": "ee7981a82ed8c254e9957701d136d47f18d8839b9e72734ca530ee56e4d057d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259672, "uuid": "9d91dcdf-bbe3-451e-a79c-33fd30200791", "value": "T15F431A13788084FDC4D6C2345B7FE21AD923B06E1235B26A37B47E26BA9AD311F2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259672, "uuid": "37177216-c7db-405f-bafb-eb31550d481d", "value": "1536:+TtLrd9/RUSYumcevoPEHx/csOgZJ+4jRd/mQ2igw:+pd9/etvkEH6sO6M41detigw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773259672, "uuid": "886e39e8-0b5b-4630-a143-a926f45490d7", "value": 55792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259672, "uuid": "c3af8059-cc93-45c3-b093-d0c284d8eb95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d04f9747-1d89-11f1-8a4c-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1773261316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261316, "uuid": "56ec2835-87d7-4a57-bd20-c6e82421da95", "comment": "Malware payload (RemcosRAT)", "value": "2039478122309c5eeb800d3528c86ed4", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261316, "uuid": "ff27fce7-b6ee-4fa0-b80e-34781b2f0324", "comment": "Malware payload (RemcosRAT)", "value": "bc1c7bdb7589ef7870bbd4857c5916aab284305661aaa99a0354c9d6ad581033", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773261316, "uuid": "a599f676-098b-47a2-bc0d-fec2e3bbbbd7", "value": "T182168E7D53611AA173E4C1D760A53134A8E4644EB0797438EC6B7A7FE1BB280FCB62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773261316, "uuid": "2cd4df7f-b672-4d11-98b5-f286624836aa", "value": "48:vdMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMUpgMk:mo+a982tkwn3MZoduZAzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773261316, "uuid": "0f184240-1f78-4c5a-86c9-7b3d832d5ae8", "value": 4102446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773261316, "uuid": "6560c1e9-223a-47e4-be6e-d48331373179", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec46d79f-1d8b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773262222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773262222, "uuid": "ef2879ed-60ce-4fe7-a394-b75a47afd646", "comment": "Malware payload", "value": "54299eae5c893a500930cce6efcd311f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773262222, "uuid": "13233f5f-7b88-4091-a937-e9a1aafe532d", "comment": "Malware payload", "value": "0e3451d9e10093f8980f2799ea2f2838df8b75395ec17e5f40c63d06decc63df", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773262222, "uuid": "4eb5a700-2ba3-4a3a-b913-8abd7ecfda4d", "value": "T1EAF1F03B21F08B71D3C021C9526656664E72A75B996A14B8F4BF533ADF2DA0330E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773262222, "uuid": "ab152c7c-a3a6-492e-8d5d-45d3c08bbc1f", "value": "96:cCu/mB657sht+O+v1fsn+h4+tIicqbA/GsGOMbSm3uC:cCu/K65C4hvZ5mzjy+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773262222, "uuid": "8897d1c0-1a19-411d-ba71-2d95de9c5e57", "value": 7757, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773262222, "uuid": "5f5efb7e-083a-47ea-8cb9-2555b7a23b76", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773187280, "uuid": "6efd73b4-1cdd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.216.21:48620/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773187511, "uuid": "f8f31c43-1cdd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://h9v22.exoruby.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773187747, "uuid": "8576bdc3-1cde-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://j1m44.exoruby.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773187753, "uuid": "88ef13e4-1cde-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.53.249:59468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188109, "uuid": "5d16bed9-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://k7r11.exoruby.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188166, "uuid": "7f226354-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.168.74:48655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188231, "uuid": "a62c6b0c-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.59.164:46357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188287, "uuid": "c767bb6b-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://l0t05.exoruby.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188295, "uuid": "cc7f8d06-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.224:33823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188889, "uuid": "2e00cf77-1ce1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:43951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773188949, "uuid": "51c507c2-1ce1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mx-9.weldoxis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773189127, "uuid": "bbf1026a-1ce1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://qr-2.weldoxis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773189374, "uuid": "4f309d5c-1ce2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.98.162:35743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773189606, "uuid": "d9d133f5-1ce2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://st-4.weldoxis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773189786, "uuid": "44f68405-1ce3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vw-8.weldoxis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773189916, "uuid": "9281f646-1ce3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:43951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773189974, "uuid": "b5451989-1ce3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:56529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773190159, "uuid": "234d8b2d-1ce4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.133.211:54521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773190269, "uuid": "64988b6e-1ce4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-sky4.eluvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773190327, "uuid": "877644da-1ce4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.229:44564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773190627, "uuid": "3a19ae4f-1ce5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openview.eluvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773190813, "uuid": "a8ea3270-1ce5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.61.16:54486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773190925, "uuid": "ec1d2e43-1ce5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-9.eluvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191109, "uuid": "594d9421-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191109, "uuid": "594f1010-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191109, "uuid": "5956513a-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191109, "uuid": "595d82d4-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191111, "uuid": "5a8d15d9-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191112, "uuid": "5b6bcff0-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191112, "uuid": "5b8220b1-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191113, "uuid": "5bb7ce92-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191174, "uuid": "80650f05-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191174, "uuid": "80778ac3-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191175, "uuid": "8099f048-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191227, "uuid": "9f9ef30d-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://myfolder.eluvia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191596, "uuid": "7b887f0a-1ce7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.133.211:54521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773191776, "uuid": "e704941d-1ce7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.82:36264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192010, "uuid": "726730aa-1ce8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lucky-point.valora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192187, "uuid": "dc2ad74c-1ce8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/run.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192246, "uuid": "ff810725-1ce8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://top88.valora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192375, "uuid": "4c3c7f75-1ce9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:33861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192618, "uuid": "dce41c3c-1ce9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.128.136:40335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192667, "uuid": "fa22b289-1ce9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-land.valora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773192729, "uuid": "1f41a1d3-1cea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8317147124/Kr7cPTQ.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193147, "uuid": "186c9f58-1ceb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://just-do.valora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193566, "uuid": "11eedee6-1cec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolstory.solenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193750, "uuid": "7f71a81d-1cec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8317147124/Ugy77D4.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193867, "uuid": "c59075d4-1cec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.233/bins/o.xml", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773193868, "uuid": "c60a84eb-1cec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://big-city.solenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773194046, "uuid": "301d9ab8-1ced-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-3.solenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773194295, "uuid": "c492e9a9-1ced-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:33861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773194466, "uuid": "2aba2967-1cee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nextstep.solenta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773194468, "uuid": "2b807d9a-1cee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.7.252:46401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773194768, "uuid": "de74dfc9-1cee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dream-12.mirante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773194949, "uuid": "4a333771-1cef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://simpleweb.mirante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195547, "uuid": "aea14394-1cf0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky.mirante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195555, "uuid": "b3aa5fe3-1cf0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.56.151:36968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195851, "uuid": "640b24a2-1cf1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.4.74.65:42708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773195967, "uuid": "a94b69d1-1cf1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-line.mirante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196448, "uuid": "c7b236bd-1cf2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-up.novalis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773196571, "uuid": "11474e08-1cf3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.1.51:51671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197053, "uuid": "3031c551-1cf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.179.220:43065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197233, "uuid": "9bd782bd-1cf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.160.129:38221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197233, "uuid": "9be58657-1cf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.160.129:38221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197233, "uuid": "9bfa5cd3-1cf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.67.143:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197407, "uuid": "03a4e886-1cf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://only-one.novalis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197469, "uuid": "285d975c-1cf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.7.252:46401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773197590, "uuid": "70af63ea-1cf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.141.4.77:32776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773198429, "uuid": "649c8832-1cf7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.179.220:43065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773198430, "uuid": "64f250f6-1cf7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.4.74.65:42708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773198848, "uuid": "5e84588d-1cf8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.141.234:36273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773198849, "uuid": "5ee5823c-1cf8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.229.149:39303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199215, "uuid": "394f8639-1cf9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.243.122:53152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199345, "uuid": "866ff13e-1cf9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.175.184.8:57591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199512, "uuid": "e9ec2781-1cf9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://best7.novalis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773199876, "uuid": "c2f93c9f-1cfa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.8.142:39809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200175, "uuid": "755be2a3-1cfb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.198.114:36114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200467, "uuid": "234c8597-1cfc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://super-day.novalis.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200717, "uuid": "b881e653-1cfc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.224.62:45097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773200718, "uuid": "b8b8d990-1cfc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.33.78:35627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201069, "uuid": "89ecd32e-1cfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.224.62:45097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201128, "uuid": "ad497e96-1cfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-way.alverto.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201375, "uuid": "40883426-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.243.122:53152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201546, "uuid": "a6891504-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-fix.alverto.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201560, "uuid": "aed730c8-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.71.140:47555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773201676, "uuid": "f4240eca-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.243.78:48764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202149, "uuid": "0dfc43f1-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-map.alverto.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202333, "uuid": "7b421e00-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.213:33399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202392, "uuid": "9ef42798-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://start01.alverto.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202396, "uuid": "a11d2b1f-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:40356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202514, "uuid": "e73ccb5f-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.181.213:33399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202573, "uuid": "0a5d6e2b-1d01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.71.140:47555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202747, "uuid": "723306a4-1d01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-cat.estoria.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773202928, "uuid": "de3fe3ae-1d01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:41468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773203437, "uuid": "0d50e1a7-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.70:43963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773203437, "uuid": "0d50e763-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.69.76:60956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773203437, "uuid": "0d541672-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-place.estoria.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773203536, "uuid": "486addc3-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.215.164:33561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773203828, "uuid": "f6b58407-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunny9.estoria.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204016, "uuid": "66e36459-1d04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.72:56065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204017, "uuid": "67512be6-1d04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.73.69:35161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204072, "uuid": "882b9f9c-1d04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.172.157:56438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204316, "uuid": "19a423d1-1d05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.38.93.186:42453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204371, "uuid": "3a5da94f-1d05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:40356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204371, "uuid": "3a6b4d78-1d05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.33.78:35627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204668, "uuid": "eb7e0fe6-1d05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.56.70:43963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204728, "uuid": "0f21473a-1d06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-sea.estoria.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773204854, "uuid": "5a33b802-1d06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.172.157:56438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205028, "uuid": "c1e722c4-1d06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.116.198:45368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205273, "uuid": "53d72069-1d07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.116.198:45368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205273, "uuid": "53da205f-1d07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.215.164:33561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205326, "uuid": "73cad453-1d07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-hub.silvura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205567, "uuid": "0302751c-1d08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.72:56065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205747, "uuid": "6e7609db-1d08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.96.129:58743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773205925, "uuid": "d877834c-1d08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-go.silvura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206050, "uuid": "2327c1a2-1d09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.38.93.186:42453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206167, "uuid": "68b678e1-1d09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.55.47:40781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206287, "uuid": "b04c6cb6-1d09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-site.silvura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206295, "uuid": "b5120681-1d09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.0.72:40873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206528, "uuid": "3fdc62cf-1d0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:41468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206595, "uuid": "682764e3-1d0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:51359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773206829, "uuid": "f38f4056-1d0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-99.silvura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773207015, "uuid": "620a5c7a-1d0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.6.91:59262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773207333, "uuid": "1ff78d8d-1d0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.193.107.196:37465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773207366, "uuid": "33781e82-1d0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-touch.velante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773207375, "uuid": "38e09e45-1d0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.26.202.100:45695/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773207916, "uuid": "7b6c24a0-1d0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.167:50007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208276, "uuid": "51b0b8c3-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.162.238:60941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208284, "uuid": "56ccc408-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:51359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208336, "uuid": "75e2581d-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.167:50007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208336, "uuid": "75e4532e-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.96.129:58743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208337, "uuid": "76527ea5-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.21:39051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208387, "uuid": "94227055-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://up-down.velante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208573, "uuid": "03174d5b-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.151.90:51176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208692, "uuid": "497fe0c6-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:38449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208693, "uuid": "4a4d7e60-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.45:51155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208754, "uuid": "6f06c40d-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.45:51155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208874, "uuid": "b61a6338-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.193.107.196:37465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208935, "uuid": "da75b6ab-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.26.202.100:45695/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773208987, "uuid": "f95cfcdb-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-v.velante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773209476, "uuid": "1ce8fda0-1d11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.6.91:59262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773209587, "uuid": "5f8613d9-1d11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://all-stars.velante.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773209718, "uuid": "ad913d50-1d11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:38449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773209839, "uuid": "f5401087-1d11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.162.238:60941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773210309, "uuid": "0db0e63f-1d13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://night-0.luminos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773210921, "uuid": "7a17895a-1d14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.219:59775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773210966, "uuid": "9577acc6-1d14-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-hub.luminos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773211207, "uuid": "24b7b66b-1d15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-day.luminos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773211570, "uuid": "fd1493a3-1d15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://5yjbyh7h.legalspeckle.digital/?=check&&actmn=EEuFqrXjLrufwdGv", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773211689, "uuid": "4422334b-1d16-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-web.luminos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773211990, "uuid": "f7b960d5-1d16-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.141.4.77:32776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773212231, "uuid": "87085c8c-1d17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.209:49269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773212287, "uuid": "a8634c24-1d17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://timb-point.lockoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773212650, "uuid": "80c2a770-1d18-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://biiev.lockoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213137, "uuid": "a38189a5-1d19-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.21:39051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213187, "uuid": "c0e24f18-1d19-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nwul2j.lockoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213190, "uuid": "c2dfb6be-1d19-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.209:49269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213250, "uuid": "e6857520-1d19-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.255.45:35507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213437, "uuid": "55d21d2e-1d1a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.212.72:52676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213498, "uuid": "7a94b7ae-1d1a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.131.82:36264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213608, "uuid": "bc35b537-1d1a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-un1oad.lockoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773213968, "uuid": "92627d57-1d1b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:33429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773214266, "uuid": "446e082c-1d1c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bridg3-scope.backtest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773214330, "uuid": "6a3bf09b-1d1c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.174.242.57:37281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773214808, "uuid": "87092d39-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvenos.backtest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773214820, "uuid": "8e8c3275-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.239.203:57981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773214877, "uuid": "b08000cc-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.176.226:49056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773214928, "uuid": "ceca077c-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.212.72:52676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215046, "uuid": "15478f5a-1d1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://inv0ic-line.backtest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215478, "uuid": "16c89a17-1d1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.150:45551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215646, "uuid": "7aea87b1-1d1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crestrai.backtest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215716, "uuid": "a4332e8a-1d1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:33429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215892, "uuid": "0d56de24-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215892, "uuid": "0d5c77e0-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.192.102.162:81/bins/bins.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215893, "uuid": "0e3664d9-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.187.6:81/hiddenbin/dvr1.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215894, "uuid": "0e75d4cf-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.239.203:57981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215906, "uuid": "15c7e19c-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.156.102.210/bins/bins.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773215906, "uuid": "15e712f6-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.186/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216085, "uuid": "8056be4e-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.174.242.57:37281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216408, "uuid": "40c3a796-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.233.244.7:38393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216426, "uuid": "4bc1f855-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.218/220/seethebesttimeforeverythingtolearn.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216429, "uuid": "4da7cda8-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://audiosolar.testload.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216685, "uuid": "e5fba15c-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.150:45551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216742, "uuid": "07ca2e4b-1d22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.221.126:55572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216742, "uuid": "07f94c1b-1d22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:59166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773216848, "uuid": "470fe5f6-1d22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://jvrkh.testload.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217328, "uuid": "65899c1d-1d23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.208/web/ENCRYPT.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217387, "uuid": "886854ef-1d23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.208/web/ENCRYPT1.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217388, "uuid": "8918b9f2-1d23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crat-mas.testload.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217703, "uuid": "448447ee-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.176.226:49056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217747, "uuid": "5f11b28c-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://5wif5-leaf.testload.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217810, "uuid": "8490717f-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/airgood.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217928, "uuid": "caca2ea3-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/CCLASS.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217928, "uuid": "caf6f74b-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217928, "uuid": "cafb5802-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/nightclass.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217928, "uuid": "cb24096a-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/bin.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217929, "uuid": "cb695791-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/AIRR.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217930, "uuid": "cbcb67c7-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/iye.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217930, "uuid": "cbfc93bf-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217932, "uuid": "cd7e2029-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/goodies.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217934, "uuid": "ce9a4a62-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/SECURED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217938, "uuid": "d0c784b2-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.55.52/WE/QAQQQQQ.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773217988, "uuid": "eeaef301-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/otigfght/mprgIoi.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218110, "uuid": "376b1a01-1d25-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://8uasm.keysum.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218407, "uuid": "e8a1d781-1d25-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr4c-craft.keysum.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218475, "uuid": "112c3f02-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:33770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218484, "uuid": "165f141d-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.146.100:60996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218654, "uuid": "7bcc3e17-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.34:43336/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "7bf94b19-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cad.659t.cn/static/setup/autocad_v1.4.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "7c3c9570-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guillaumerobin.com/spankki-suomi/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "7c4c0df5-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guillaumerobin.com/smobillispankki/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "7c5ab59d-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guillaumerobin.com/spankki-zi/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "7c751f2b-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guillaumerobin.com/pankki2026/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218655, "uuid": "7c7b57c0-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guillaumerobin.com/2026-pankki/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7c8a540c-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guillaumerobin.com/sp-ankki-pankki/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7c8be812-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/kpsmoused0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7c8d8485-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/devfreqd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cb67aa9-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/ttmswapd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cbadcc8-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/biosd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cc45a3c-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/deferwqd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cc55af1-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/mdsync1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cc5b0df-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/kintegrity0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7ccd691f-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/kworkerd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7ccfc933-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pole-rt-inger.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cfbb519-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/ip6addrd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218656, "uuid": "7cffbf74-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://6.ddns.me/789.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218657, "uuid": "7d333b4d-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/ethd0", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218657, "uuid": "7d9d0b2e-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/kvmirqd", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218658, "uuid": "7dddba66-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/kswapd1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218658, "uuid": "7e342981-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/vredisd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218659, "uuid": "7e62ef51-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://wire2spell.com/1.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773218659, "uuid": "7e6cb642-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spjx-1k1.pages.dev/download/android%E7%89%88.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219609, "uuid": "b4fed087-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://genefrost.keysum.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219611, "uuid": "b5ed2323-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://compimento.ba/asyncdecenimg_050306.png", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219611, "uuid": "b5f120f1-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://modern8-signal.logcheck.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219611, "uuid": "b637ca7d-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.224.103/favicon.ico", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219612, "uuid": "b6624688-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.48.121/ksnapd0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219612, "uuid": "b6eb5850-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rkxv.keysum.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219614, "uuid": "b7a71104-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-eu-gra-1.gofile.io/download/direct/793ff904-1286-4d9d-b4be-4c6c46e867f0/231_20260311.zip", "Tag": [ { "name": "ValleyRAT", "colour": "#4EFAD2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219616, "uuid": "b94ba434-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenfields-world.cc/dev/jeFopmg.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219623, "uuid": "bd1c824d-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:59166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219623, "uuid": "bd2d5b5b-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:43740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773219637, "uuid": "c5694c1e-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.121.16:43929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220102, "uuid": "da913b9b-1d29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.146.100:60996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220147, "uuid": "f59d45d6-1d29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-tru3.logcheck.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220327, "uuid": "60c1df47-1d2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iqkd.logcheck.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220340, "uuid": "685fdf82-1d2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.234.157:53515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220518, "uuid": "d2bc66cb-1d2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.53.249:59468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220746, "uuid": "5a7a1f78-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://flowpassive.logcheck.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220750, "uuid": "5ce2bb57-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sixmexicos.com/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220808, "uuid": "7f360d3b-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://casadoserralheirosaocarlos.com.br/ENCRYPTSS.Ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773220867, "uuid": "a285df86-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-oceans.net/ENCRYTPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221108, "uuid": "32900b2f-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://photo-id5631894.com/", "Tag": [ { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221168, "uuid": "5614c4ee-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://9rfio.backlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221410, "uuid": "e6419561-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive.org/download/optimized_msi_20260309/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221422, "uuid": "ed505e39-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.233.238:35774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221467, "uuid": "08801078-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hw94h.backlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221468, "uuid": "090098ef-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rewardhunt.xyz/32tyughwjkem/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221657, "uuid": "79c20f10-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.79:50444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773221767, "uuid": "bb084aa9-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://parsegri.backlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773222427, "uuid": "4494495b-1d2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ri4w.backlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773222668, "uuid": "d4080170-1d2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gran-pra.bestlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773222907, "uuid": "62d6929c-1d30-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://uth9.bestlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773223280, "uuid": "40fdb2e4-1d31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.103.74:43539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773223630, "uuid": "11b8e6fe-1d32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ch3ck-spark.bestlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773224169, "uuid": "52cb0f6a-1d33-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zrvkmhps.bestlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773224469, "uuid": "055cbb7c-1d34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ukixhx.whitelist.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773224534, "uuid": "2c44b546-1d34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.103.74:43539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773224599, "uuid": "53137c87-1d34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.195.51:33852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773225127, "uuid": "8e142de3-1d35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://root3-layer.whitelist.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773225191, "uuid": "b3b2ad27-1d35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:47403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773225309, "uuid": "fa56b29f-1d35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://civilsandbo.whitelist.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773225787, "uuid": "170f251e-1d37-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://n4rro5-panel.checksum.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773226637, "uuid": "11de26d3-1d39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:47403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773226688, "uuid": "300954c2-1d39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iondawn.checksum.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773227121, "uuid": "323555da-1d3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.197:58525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773227422, "uuid": "e5ecedfd-1d3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.80.7:60609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228022, "uuid": "4b72d85c-1d3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.86.252:40251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228201, "uuid": "b614ebd2-1d3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:34612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773228429, "uuid": "3de95226-1d3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7453936223/KAQ8PQ5.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773229035, "uuid": "a76aaf8d-1d3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:34612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773229088, "uuid": "c6a33c91-1d3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://woupp.com/curl/62724e7a17370145626f76d82d7da73c6925fd1aaeca39d7414f057e92001aad", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773229101, "uuid": "cecaceaf-1d3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.80.7:60609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773229412, "uuid": "87b1aa78-1d3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.86.252:40251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773229987, "uuid": "de709a3a-1d40-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-gri.fastlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230060, "uuid": "0a3bf4b4-1d41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.27.83:51026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230068, "uuid": "0f07c69c-1d41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.227.156:52208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230228, "uuid": "6e7a6e8b-1d41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fjnghv.fastlog.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230299, "uuid": "98964c3e-1d41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.71.131.225:34950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230478, "uuid": "03117f6a-1d42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.74.197:58525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230731, "uuid": "99f1d67d-1d42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.134.254.3:39512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773230896, "uuid": "fca23222-1d42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.86:59619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773231860, "uuid": "3adab840-1d45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.61.79/dick.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773231861, "uuid": "3be02c2a-1d45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.233.244.7:38393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773232036, "uuid": "a406f517-1d45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.153.121:52876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773232091, "uuid": "c4eb10c0-1d45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.86:59619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773232399, "uuid": "7c858dfb-1d46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.40.11:38162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773233047, "uuid": "fe91a85a-1d47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.151.37:44949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773233779, "uuid": "b2b42964-1d49-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.153.121:52876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773233959, "uuid": "1dfd14fa-1d4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.99.83:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773234258, "uuid": "d07276d2-1d4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.40.11:38162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773234316, "uuid": "f30d4420-1d4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.4:56852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773234320, "uuid": "f51caa27-1d4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:40002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773234435, "uuid": "399cbcf8-1d4b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.161.92:55994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773234856, "uuid": "349eedd5-1d4c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.135.237:60313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773234976, "uuid": "7c275494-1d4c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.247.55:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773235581, "uuid": "e52333ea-1d4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:40002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773235752, "uuid": "4aa539c6-1d4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:38139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773235752, "uuid": "4adc2953-1d4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.161.92:55994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773235755, "uuid": "4caadfb4-1d4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.58:52332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773235812, "uuid": "6ec1f0a6-1d4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.192.187:55661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773236170, "uuid": "43ffb8c3-1d4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.73.69:53120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773236296, "uuid": "8f5b44a6-1d4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:38139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773236711, "uuid": "86427b1b-1d50-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.83.199:57315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237033, "uuid": "4623a096-1d51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.116.0:51129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237139, "uuid": "854dac43-1d51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.116.0:51129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237610, "uuid": "9e55deec-1d52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.192.187:55661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237617, "uuid": "a2b1d982-1d52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.146:60001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237974, "uuid": "76f5efe6-1d53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.73.69:53120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773237979, "uuid": "7a2dca4b-1d53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.100.243:41775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238037, "uuid": "9cfbc869-1d53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.58:52332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238339, "uuid": "509a47d3-1d54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.83.199:57315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238400, "uuid": "75683967-1d54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.60.32.162:46682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773238524, "uuid": "becc1b89-1d54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/bins/sora.x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773239240, "uuid": "69eb3f15-1d56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.146:60001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773239290, "uuid": "87eaedae-1d56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:49753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773239541, "uuid": "1d2971b8-1d57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.60.32.162:46682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773239663, "uuid": "65bc0b3f-1d57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.100.243:41775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773239903, "uuid": "f4c0f787-1d57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.123.40:46623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240143, "uuid": "83c26335-1d58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.160.77:42767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240163, "uuid": "8fafa590-1d58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.60:54736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240562, "uuid": "7deb397e-1d59-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.74:60617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773240983, "uuid": "78dcf902-1d5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.113.211:34856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241153, "uuid": "de0fdcdc-1d5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.88.97:60686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241520, "uuid": "b8d2b047-1d5b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.123.40:46623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241820, "uuid": "6b8eaa13-1d5c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.60:54736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773241936, "uuid": "b0ce97da-1d5c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:46211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773242122, "uuid": "1faa6fb8-1d5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.74:60617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773242305, "uuid": "8c735dbd-1d5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:58544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773242361, "uuid": "ae3f6ad7-1d5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:34491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243009, "uuid": "30954b5c-1d5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://napc.skyip.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243023, "uuid": "38667c25-1d5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:57370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243268, "uuid": "cacaa576-1d5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.127.137:60661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243558, "uuid": "7780ba6c-1d60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.160.77:42767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243666, "uuid": "b80829cb-1d60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://thicketglobal.skyip.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243800, "uuid": "08096026-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.141.234:36273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243856, "uuid": "290e101e-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:34491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243907, "uuid": "47d393d5-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://uxcas7x8.skyip.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773243914, "uuid": "4c05bca2-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.157.199:51156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244213, "uuid": "fdb343aa-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://metr1-hinge.skyip.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244399, "uuid": "6cbbe5f2-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.145.179:49279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244399, "uuid": "6cd28ea7-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.244:43992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244447, "uuid": "894914f0-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeibwz6lzwo6u5gkhp3ydl4te3hl3plfkypox6mnejssqwfrpdsmqoy.ipfs.dweb.link/?filename=img_063210.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244449, "uuid": "8a594a0a-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia601609.us.archive.org/5/items/msi-pro-with/MSI_PRO_with.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244641, "uuid": "fd295d3f-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:57370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244753, "uuid": "3feb1cb9-1d63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.145.179:49279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773244999, "uuid": "d24a6bba-1d63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.126.180:41725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773245058, "uuid": "f5b434cc-1d63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.216.220:37006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773245537, "uuid": "135711c6-1d65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.157.199:51156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773245779, "uuid": "a376b1b1-1d65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.90.217:54080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773245901, "uuid": "ebf9cabe-1d65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.242.120:58284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773246314, "uuid": "e212ab7d-1d66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.244:43992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773246315, "uuid": "e298f374-1d66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.237.52:49370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773246558, "uuid": "73a5a8e8-1d67-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.108:58035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773246787, "uuid": "fbfa190b-1d67-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-5tric.sightup.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247148, "uuid": "d3364fd5-1d68-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://refinewinter.sightup.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247387, "uuid": "61e90da9-1d69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-forgea.sightup.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247453, "uuid": "88ef9365-1d69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.242.120:58284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247749, "uuid": "39d26ac0-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.134.85:43801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247815, "uuid": "60aa582e-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.189.54:36423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773247825, "uuid": "66fcbaa8-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.10:47165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773248060, "uuid": "f33f5a55-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.74.12:45121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773248360, "uuid": "a5ffb200-1d6b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.189.54:36423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773248362, "uuid": "a6f5091a-1d6b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.165.253.208:4307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773248419, "uuid": "c8b5bd2e-1d6b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.127.137:60661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773248829, "uuid": "bd65865f-1d6c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.241.179:49633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773249321, "uuid": "e24ba21e-1d6d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.108:42687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773249737, "uuid": "daba6e24-1d6e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.165.253.208:4307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773250036, "uuid": "8caf3ab9-1d6f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.198.162:60036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773250146, "uuid": "ce62f2fe-1d6f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.108:42687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773250209, "uuid": "f3b79324-1d6f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-forest7.ventomaris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773250686, "uuid": "1071e9a9-1d71-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickpage.ventomaris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773250866, "uuid": "7b8db759-1d71-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sun-88.ventomaris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773251289, "uuid": "77b5dee5-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openview.ventomaris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773251302, "uuid": "7f26dc54-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.10:47165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773251355, "uuid": "9eff7e04-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.241.179:49633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773251356, "uuid": "9f75dab2-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.78.250:58002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773251467, "uuid": "e1872b81-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-road.altovante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773251826, "uuid": "b7bd4dec-1d73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://skydream.altovante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773252127, "uuid": "6b0194ca-1d74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-line1.altovante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773252187, "uuid": "8f0fefe5-1d74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.225.143:45621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773252321, "uuid": "dea0db70-1d74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.200.166:59829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773252847, "uuid": "18064528-1d76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://easygo.altovante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253098, "uuid": "ae1c523b-1d76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.126.180:41725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253147, "uuid": "cac782cd-1d76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7903503838/PGy75Fu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253163, "uuid": "d4ab82f2-1d76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.97.227:58644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253339, "uuid": "3d686b2e-1d77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.71.211:42420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253519, "uuid": "a881c7ed-1d77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.78.250:58002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253685, "uuid": "0bda5584-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-9.solariana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253700, "uuid": "14656c14-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.97.227:58644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253867, "uuid": "785034e7-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky.solariana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253886, "uuid": "83c2ea38-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.235.44:42960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253948, "uuid": "a861fde3-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.239.63:35959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773253995, "uuid": "c498f6e6-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.253.93.84:56263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773254114, "uuid": "0b2b8116-1d79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/2061374227/2Hl1isG.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773254347, "uuid": "9648865a-1d79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastcloud.solariana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773254526, "uuid": "0113bf33-1d7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-river.estrellis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773254529, "uuid": "028d58c9-1d7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.200.166:59829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773254889, "uuid": "d950e791-1d7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pureland3.estrellis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773254955, "uuid": "0087dac7-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.137.250.247:45452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255137, "uuid": "6d3ba30b-1d7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.253.93.84:56263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255499, "uuid": "450dddfc-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.239.63:35959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255544, "uuid": "5fbed560-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://just-up.estrellis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773255793, "uuid": "f44504bd-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.68.3:48865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256147, "uuid": "c74af12a-1d7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://newpoint.estrellis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256333, "uuid": "3611eefe-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256333, "uuid": "3634cfbf-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "371ae50f-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "371afc4b-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "371e3389-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "3720a198-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "37215182-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256335, "uuid": "372553ea-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256337, "uuid": "38a68005-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256386, "uuid": "556dd984-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-space.lunavilla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256398, "uuid": "5cfa900d-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.213.240.159/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256511, "uuid": "a06e965b-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.68.3:48865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256686, "uuid": "084aa7ae-1d7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-v5.lunavilla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773256927, "uuid": "980d559b-1d7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://starlink.lunavilla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773257168, "uuid": "279be80e-1d80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-11.lunavilla.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773257348, "uuid": "93544acf-1d80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7903503838/R3NzF65.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773257467, "uuid": "d9c24210-1d80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-air.miravento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773257766, "uuid": "8c65dcba-1d81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-top.miravento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773258610, "uuid": "8358cc39-1d83-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://go-99.miravento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773258671, "uuid": "a7cea99c-1d83-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.237.52:49370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773258807, "uuid": "f8a6195a-1d83-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.164.47:57815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773258909, "uuid": "35b5845f-1d84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bestway.miravento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773259089, "uuid": "a0827d01-1d84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-path.silvaterra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773259450, "uuid": "77b64203-1d85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-01.silvaterra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773259687, "uuid": "050ca470-1d86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-hub.silvaterra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773259690, "uuid": "0731fb19-1d86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.30.81:44613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773260226, "uuid": "46974721-1d87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://softweb.silvaterra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773260353, "uuid": "91f46aa1-1d87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.164.56:40812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773260532, "uuid": "fcc6bdd3-1d87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-stone.novalento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773260542, "uuid": "02d793a5-1d88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.54:53718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261127, "uuid": "5f321658-1d89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-7.novalento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261254, "uuid": "ab101229-1d89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.75.167:58422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261561, "uuid": "6277b24b-1d8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.4:56852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261681, "uuid": "a9fd90e5-1d8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.227.85.74:33976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773261981, "uuid": "5ca3c62d-1d8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.54:53718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773262098, "uuid": "a2762aed-1d8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.75.167:58422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773262810, "uuid": "4abce169-1d8d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stepforward.novalento.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773263107, "uuid": "fbf44a6b-1d8d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-fix.valeriana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773263346, "uuid": "8a21c1aa-1d8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-90.valeriana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773263707, "uuid": "615d85e5-1d8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-up.valeriana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773264126, "uuid": "5ac5bc1b-1d90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://datalink.valeriana.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773264141, "uuid": "63c959e0-1d90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.75.76:34920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773264457, "uuid": "201be2ba-1d91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.89.131:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773264672, "uuid": "a0366f89-1d91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.182.177/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773264792, "uuid": "e82a3819-1d91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.58:56449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773264920, "uuid": "3474493b-1d92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.185.93.188:47912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773265026, "uuid": "735584d5-1d92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-peak.ambertide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773265398, "uuid": "50ef871b-1d93-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.186.101:45380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773266166, "uuid": "1b2f0dfe-1d95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fire-v12.ambertide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773266646, "uuid": "3903167c-1d96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-way.ambertide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773266829, "uuid": "a6599c35-1d96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://myspace.ambertide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773267736, "uuid": "c2e38b74-1d98-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://166.48.94.241:50758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773267919, "uuid": "2ff4ee3d-1d99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.59.216:57615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773268089, "uuid": "9535be2c-1d99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8167064937/L2BuR1u.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773268280, "uuid": "06b709ad-1d9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.134.211:49201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773268577, "uuid": "b844c434-1d9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.110.174:53758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773269359, "uuid": "89e06d86-1d9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.203:53582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773269359, "uuid": "8a3c5f1e-1d9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:46211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773269472, "uuid": "cd50c71e-1d9c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.203:53582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773269664, "uuid": "4017d3bd-1d9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.59.216:57615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773270021, "uuid": "14797b3a-1d9e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.13.69:44388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773270081, "uuid": "3854aed9-1d9e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.13.69:44388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773270678, "uuid": "9c4b1d84-1d9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.191.18:52767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773271398, "uuid": "49a64bd5-1da1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.10.153:48185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773271572, "uuid": "b143190f-1da1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.127.236:41670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773271699, "uuid": "fc9a0495-1da1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.23.189:59277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773272422, "uuid": "abe7ee26-1da3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.106:51123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773272540, "uuid": "f1ee4ec2-1da3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.23.189:59277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773272661, "uuid": "3a4e8de1-1da4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.237:42017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773272720, "uuid": "5d6a55b9-1da4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.227.246:54518/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773272887, "uuid": "c0f98400-1da4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.191.18:52767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773272887, "uuid": "c0fbcafc-1da4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.127.236:41670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773273011, "uuid": "0b075f56-1da5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.216.220:37006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773273129, "uuid": "511c25f4-1da5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8441193572/I8N8jbR.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773273435, "uuid": "0781f114-1da6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.82.151:35064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773245885, "uuid": "e245c50a-1d65-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.242.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773214326, "uuid": "67c7a475-1d1c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.174.242.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773214805, "uuid": "85a51f89-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.239.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218645, "uuid": "76629f5d-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.236.48.121", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773208326, "uuid": "6f8b97e3-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.20.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773236165, "uuid": "40e9417e-1d4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.73.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773228008, "uuid": "42e3518c-1d3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.86.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773216364, "uuid": "26b3db85-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.233.244.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240125, "uuid": "7928263e-1d58-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.98.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773260344, "uuid": "8cf6a023-1d87-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.164.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773194465, "uuid": "29c48963-1cee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.7.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259685, "uuid": "040d6d71-1d86-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.30.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255785, "uuid": "ef915e4b-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.68.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773235806, "uuid": "6afcb597-1d4e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.192.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773216726, "uuid": "fe4a6a2f-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.221.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191765, "uuid": "e0b182e1-1ce7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.131.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252183, "uuid": "8cade5b3-1d74-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.225.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773248825, "uuid": "bac06f0f-1d6c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.241.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773264784, "uuid": "e3353752-1d91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.248.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773271566, "uuid": "ad994d53-1da1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.127.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773265384, "uuid": "48fc9ee8-1d93-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.186.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244985, "uuid": "c9fcba28-1d63-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.126.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773240125, "uuid": "79282926-1d58-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.160.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773250025, "uuid": "861ee11b-1d6f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.198.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773253866, "uuid": "77779722-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.235.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773258784, "uuid": "eb0690fe-1d83-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.164.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773227409, "uuid": "ddd6bc3c-1d3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.80.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188225, "uuid": "a2677511-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.59.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201544, "uuid": "a562775b-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.71.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773190145, "uuid": "1ae43e8f-1ce4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.133.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773253925, "uuid": "9ad1f500-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.239.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773234845, "uuid": "2e693079-1d4c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.135.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773237606, "uuid": "9be6709b-1d52-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773272645, "uuid": "307cb111-1da4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773232024, "uuid": "9cfbbfa7-1d45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.153.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247806, "uuid": "5bd7d63d-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.74.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773235744, "uuid": "461364d8-1d4e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773272706, "uuid": "54d8c05e-1da4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.227.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773206285, "uuid": "aee34648-1d09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.0.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773198845, "uuid": "5c616b1e-1cf8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.141.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773234424, "uuid": "33618f32-1d4b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.161.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218465, "uuid": "0b0a320f-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.146.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773207364, "uuid": "328ad1e8-1d0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.26.202.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773232385, "uuid": "73a80592-1d46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.40.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244385, "uuid": "64563be3-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.145.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773271685, "uuid": "f44c7682-1da1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.23.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773213245, "uuid": "e36d4356-1d19-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.255.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773236707, "uuid": "83d55be9-1d50-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.83.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773198845, "uuid": "5c6166f3-1cf8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.229.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773238385, "uuid": "6c463606-1d54-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "136.60.32.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773197225, "uuid": "971e87fd-1cf4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.67.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773245766, "uuid": "9b5e047f-1d65-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.90.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773214865, "uuid": "a9459506-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.176.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773271385, "uuid": "4197cb2d-1da1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.10.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773270007, "uuid": "0c5fa486-1d9e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.13.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773210906, "uuid": "717cd3a5-1d14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.115.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212226, "uuid": "841876ec-1d17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.23.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247806, "uuid": "5bd75ef3-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.189.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773246310, "uuid": "dfffbd31-1d66-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.237.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773251345, "uuid": "98b722e7-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.78.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773245045, "uuid": "edc10a55-1d63-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.216.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773203526, "uuid": "42796475-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.215.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252305, "uuid": "d56344de-1d74-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.129.200.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256324, "uuid": "30d76f79-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.213.240.159", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773207306, "uuid": "0f844061-1d0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.193.107.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219607, "uuid": "b3776b00-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.224.103", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773248345, "uuid": "9ca5c056-1d6b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.165.253.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217326, "uuid": "643bb5ba-1d23-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.210.186.208", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773215884, "uuid": "08762a37-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.156.102.210", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773208266, "uuid": "4bb6f0f8-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.158.162.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221408, "uuid": "e52f6682-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.233.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773243906, "uuid": "46b197fe-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.157.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204064, "uuid": "83931ea4-1d04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.172.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773246544, "uuid": "6b8ccdcc-1d67-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.23.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773261245, "uuid": "a5d0abfe-1d89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.75.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773215465, "uuid": "0f104759-1d1f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.149.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773202325, "uuid": "76e1a191-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.181.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773243246, "uuid": "bd7af238-1d5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.127.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773205744, "uuid": "6ce1389f-1d08-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.96.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773207907, "uuid": "7606f5db-1d0d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.185.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773227107, "uuid": "29f012de-1d3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.74.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773264124, "uuid": "59eb41f8-1d90-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.75.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773239885, "uuid": "ea56f847-1d57-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.123.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773249306, "uuid": "d96e457c-1d6d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.181.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195846, "uuid": "612252b1-1cf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.4.74.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773237964, "uuid": "718619b6-1d53-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.100.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217807, "uuid": "82de3a97-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.240.55.52", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773273424, "uuid": "013a6ccd-1da6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.187.82.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247743, "uuid": "3649ecdd-1d6a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.134.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773197585, "uuid": "6d929f74-1cf5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.141.4.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773267906, "uuid": "27fa9d17-1d99-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.59.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773230047, "uuid": "0234d1a4-1d41-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.27.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219607, "uuid": "b3783b26-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.121.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773253325, "uuid": "3539ed69-1d77-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.71.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773197225, "uuid": "971e5410-1cf4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.160.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773264664, "uuid": "9bcb68b5-1d91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.131.182.177", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773215884, "uuid": "08761a36-1d20-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.225.187.6", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199325, "uuid": "7a78a678-1cf9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.175.184.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773230707, "uuid": "8bbe4069-1d42-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.134.254.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773233945, "uuid": "1597ec0d-1d4a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.99.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773237007, "uuid": "3697b384-1d51-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.116.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773190324, "uuid": "85a1b361-1ce4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.249.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204306, "uuid": "1348847a-1d05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.38.93.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773264448, "uuid": "1aee0209-1d91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.89.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220323, "uuid": "5ea2914f-1d2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.234.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204006, "uuid": "608d4642-1d04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.73.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204006, "uuid": "608d3219-1d04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217745, "uuid": "5da5a780-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "5wif5-leaf.testload.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773211567, "uuid": "fb9a3c06-1d15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "5yjbyh7h.legalspeckle.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218648, "uuid": "783b37db-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "6.ddns.me" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201665, "uuid": "ed9d8a3b-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.243.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773224586, "uuid": "4b2b7653-1d34-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.195.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773230886, "uuid": "f67b4b15-1d42-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.93.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218107, "uuid": "35ae6633-1d25-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "8uasm.keysum.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773261665, "uuid": "a06e803e-1d8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.227.85.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191105, "uuid": "56ee8824-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.152.233", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773216425, "uuid": "4b30046a-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.44.159.218", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221106, "uuid": "311598f6-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "9rfio.backlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773209585, "uuid": "5e240f7a-1d11-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "all-stars.velante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773213606, "uuid": "baeb040b-1d1a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-un1oad.lockoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773216428, "uuid": "4c846344-1d21-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "audiosolar.testload.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244445, "uuid": "882d34ab-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeibwz6lzwo6u5gkhp3ydl4te3hl3plfkypox6mnejssqwfrpdsmqoy.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773199509, "uuid": "e890f0d4-1cf9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "best7.novalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773258908, "uuid": "34c0e072-1d84-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bestway.miravento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193865, "uuid": "c45dc686-1cec-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "big-city.solenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212646, "uuid": "7e5db85d-1d18-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "biiev.lockoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773250207, "uuid": "f26a3f8f-1d6f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-forest7.ventomaris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220865, "uuid": "a19dfddc-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-oceans.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773190267, "uuid": "63c337ed-1ce4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-sky4.eluvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773214265, "uuid": "4369346d-1d1c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bridg3-scope.backtest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773253684, "uuid": "0b2de447-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-9.solariana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773196446, "uuid": "c6675ab3-1cf2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-up.novalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218651, "uuid": "79963483-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cad.659t.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773223626, "uuid": "0f4815d0-1d32-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ch3ck-spark.bestlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773225306, "uuid": "f8cc9910-1d35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "civilsandbo.whitelist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195545, "uuid": "ada5e0db-1cf0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky.mirante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773253866, "uuid": "77824a2b-1d78-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky.solariana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773265024, "uuid": "72828868-1d92-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-peak.ambertide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219607, "uuid": "b38d63e5-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "compimento.ba" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773257167, "uuid": "26dbdc28-1d80-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-11.lunavilla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193564, "uuid": "10cb73f6-1cec-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolstory.solenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217385, "uuid": "8740f9e7-1d23-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crat-mas.testload.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773215645, "uuid": "79ef7044-1d1f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crestrai.backtest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773264124, "uuid": "59f7a0c2-1d90-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "datalink.valeriana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773204726, "uuid": "0dfb2644-1d06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-sea.estoria.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256384, "uuid": "5468227c-1d7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-space.lunavilla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773194766, "uuid": "dd3cad62-1cee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dream-12.mirante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201544, "uuid": "a56bbca9-1cfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-fix.alverto.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252845, "uuid": "17241660-1d76-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "easygo.altovante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773190924, "uuid": "eb3bce91-1ce5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-9.eluvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773211687, "uuid": "433d3293-1d16-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-web.luminos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773254345, "uuid": "953d73a4-1d79-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastcloud.solariana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218648, "uuid": "783d8113-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-eu-gra-1.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773266165, "uuid": "1a4f65aa-1d95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fire-v12.ambertide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773230225, "uuid": "6cbea730-1d41-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fjnghv.fastlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220744, "uuid": "5993bbbf-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "flowpassive.logcheck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773206827, "uuid": "f20ec6e3-1d0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "free-99.silvura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773257465, "uuid": "d8d74da5-1d80-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-air.miravento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773229985, "uuid": "dd67ce66-1d40-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-gri.fastlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219607, "uuid": "b3882fd7-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "genefrost.keysum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773258606, "uuid": "8114c253-1d83-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "go-99.miravento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773211205, "uuid": "23cde61e-1d15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-day.luminos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256684, "uuid": "075de2d6-1d7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-v5.lunavilla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773222666, "uuid": "d2d828fd-1d2f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gran-pra.bestlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773192665, "uuid": "f929033d-1ce9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-land.valora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773251465, "uuid": "e0c22208-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-road.altovante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219609, "uuid": "b4e95eb5-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenfields-world.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218648, "uuid": "7845de36-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "guillaumerobin.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773187508, "uuid": "f746492a-1cdd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "h9v22.exoruby.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773263345, "uuid": "89773d09-1d8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-90.valeriana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773195966, "uuid": "a85cfe04-1cf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-line.mirante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221465, "uuid": "0751cfa5-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hw94h.backlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244445, "uuid": "8844bf86-1d62-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia601609.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773215045, "uuid": "144d7daf-1d1e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "inv0ic-line.backtest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773226685, "uuid": "2e93ec5c-1d39-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iondawn.checksum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220323, "uuid": "5ead8553-1d2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iqkd.logcheck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773187745, "uuid": "847f306f-1cde-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "j1m44.exoruby.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773193145, "uuid": "1756903e-1ceb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "just-do.valora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773255543, "uuid": "5f0658b4-1d7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "just-up.estrellis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773216846, "uuid": "461fd133-1d22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "jvrkh.testload.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188106, "uuid": "5b9fe1c8-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "k7r11.exoruby.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188285, "uuid": "c64ce603-1cdf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "l0t05.exoruby.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773206285, "uuid": "aeef2ade-1d09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-site.silvura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773266644, "uuid": "37fd89c3-1d96-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-way.ambertide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259085, "uuid": "9e1d4554-1d84-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-path.silvaterra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773201126, "uuid": "ac4f11eb-1cfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-way.alverto.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773192008, "uuid": "7160d699-1ce8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lucky-point.valora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773214805, "uuid": "85b0e799-1d1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumvenos.backtest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259685, "uuid": "0417b1e0-1d86-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-hub.silvaterra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247386, "uuid": "611d6958-1d69-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-forgea.sightup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773244210, "uuid": "fc7451fb-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "metr1-hinge.skyip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219607, "uuid": "b3812609-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "modern8-signal.logcheck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773188947, "uuid": "50bfb200-1ce1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mx-9.weldoxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773191225, "uuid": "9eb8c2fa-1ce6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "myfolder.eluvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773266828, "uuid": "a557b38b-1d96-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "myspace.ambertide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773225785, "uuid": "16093e68-1d37-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "n4rro5-panel.checksum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773243006, "uuid": "2eb7a488-1d5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "napc.skyip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220145, "uuid": "f4943be6-1d29-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-tru3.logcheck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773203434, "uuid": "0ba2da9c-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-place.estoria.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256145, "uuid": "c61176cb-1d7d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "newpoint.estrellis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773194465, "uuid": "29cc3cd3-1cee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nextstep.solenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773210307, "uuid": "0c6d0aa0-1d13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "night-0.luminos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773213185, "uuid": "bfe7c30e-1d19-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nwul2j.lockoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773194044, "uuid": "2f1aa5a7-1ced-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-3.solenta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773197405, "uuid": "026288b1-1cf5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "only-one.novalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773190625, "uuid": "38e19c24-1ce5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "openview.eluvia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773251285, "uuid": "756fd519-1d72-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "openview.ventomaris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221765, "uuid": "b9e5c7ae-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "parsegri.backlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221106, "uuid": "310eeb51-1d2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-id5631894.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773263706, "uuid": "609ac55a-1d8f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-up.valeriana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773208985, "uuid": "f84ce222-1d0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-v.velante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218649, "uuid": "78d2deb3-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pole-rt-inger.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773254885, "uuid": "d723e18b-1d7a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pureland3.estrellis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773189125, "uuid": "bb016881-1ce1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "qr-2.weldoxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773261125, "uuid": "5e54ec82-1d89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-7.novalento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773205923, "uuid": "d77fc95a-1d08-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-go.silvura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773250685, "uuid": "0f6f0d99-1d71-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickpage.ventomaris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773260525, "uuid": "f8d6fa1f-1d87-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-stone.novalento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773247146, "uuid": "d243de91-1d68-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "refinewinter.sightup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773221466, "uuid": "078b7027-1d2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rewardhunt.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773222425, "uuid": "4373bb8a-1d2f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ri4w.backlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773219607, "uuid": "b3eab86d-1d28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rkxv.keysum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773225125, "uuid": "8ca7846e-1d35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "root3-layer.whitelist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773194947, "uuid": "494a2aad-1cef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "simpleweb.mirante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773257765, "uuid": "8b6d6b09-1d81-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-top.miravento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773220744, "uuid": "59983331-1d2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sixmexicos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773251825, "uuid": "b6f5c36d-1d73-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "skydream.altovante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773205325, "uuid": "73042c94-1d07-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-hub.silvura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773263106, "uuid": "fb28a368-1d8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-fix.valeriana.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773207365, "uuid": "329d4fbb-1d0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-touch.velante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773260225, "uuid": "45c4967d-1d87-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "softweb.silvaterra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773210965, "uuid": "94adad21-1d14-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-hub.luminos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218648, "uuid": "783f2af2-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spjx-1k1.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773189604, "uuid": "d8bde470-1ce2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "st-4.weldoxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773256926, "uuid": "973f8de0-1d7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "starlink.lunavilla.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773202385, "uuid": "9ac97b3a-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "start01.alverto.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773262807, "uuid": "491d4566-1d8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stepforward.novalento.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773250863, "uuid": "79f31aca-1d71-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sun-88.ventomaris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773203826, "uuid": "f5700ee3-1d03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunny9.estoria.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773200465, "uuid": "225bb3b1-1cfc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "super-day.novalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773243664, "uuid": "b6e7f241-1d60-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "thicketglobal.skyip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773212285, "uuid": "a722a80d-1d17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "timb-point.lockoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773252125, "uuid": "69ea8f21-1d74-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-line1.altovante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773202147, "uuid": "0cd4ce6e-1d00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-map.alverto.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773192245, "uuid": "fe659268-1ce8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "top88.valora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218406, "uuid": "e79742ac-1d25-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr4c-craft.keysum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773224466, "uuid": "04153cc3-1d34-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ukixhx.whitelist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773246785, "uuid": "fade9e91-1d67-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-5tric.sightup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773208386, "uuid": "9336b47d-1d0e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "up-down.velante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773259447, "uuid": "75ec1bcd-1d85-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-01.silvaterra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773222906, "uuid": "61d03150-1d30-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "uth9.bestlog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773243906, "uuid": "46bb9ea0-1d61-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "uxcas7x8.skyip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773217986, "uuid": "ed588636-1d24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "valfanto.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773189785, "uuid": "441b353b-1ce3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vw-8.weldoxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773202745, "uuid": "71527313-1d01-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-cat.estoria.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773254524, "uuid": "000a4f32-1d7a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-river.estrellis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773218645, "uuid": "76817dd7-1d26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wire2spell.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773229087, "uuid": "c675270b-1d3e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "woupp.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773224167, "uuid": "51da10b8-1d33-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zrvkmhps.bestlog.in.net" } ] } }