{ "Event": { "published": true, "date": "2024-11-14", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-11-14", "timestamp": 1731628992, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "4462e908-b820-4725-b349-ecc0bcca1c35", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45ef237d-a21b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731542407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542407, "uuid": "1ef1bcaa-557b-4cf2-8cd8-3f111bbd72d4", "comment": "Malware payload (Mirai)", "value": "6ccd2cf611113610ca7e9e6efafc43f0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542407, "uuid": "bc343414-dd5e-46ba-93a1-956e726924bc", "comment": "Malware payload (Mirai)", "value": "1c18b60204b6deea529a26f9532b4978eb6241dc45e9a3c0a02b4c69f4544ac4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542407, "uuid": "50b980e5-82a0-4315-9640-38083bbe7e46", "value": "T1E2B3AEEBF64715A2C85243F013C79F8E3E232390AE57A4E76D1E267B19760DB1D06B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542407, "uuid": "162ad8c0-0355-41da-bb2d-1b90a8d7d900", "value": "1536:pkA9afIgfNMW3zC8aRGGTtJM/qrlpmxJ6nDgJ2/LWW:6fIw3e8ZE3MYlphDgJ2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542407, "uuid": "ff1622e5-2b74-48d6-b9cb-8fe852632d12", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542407, "uuid": "65b39461-7225-44ee-8527-997fdd93aaae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f753d537-a190-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731542466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542466, "uuid": "f8602e2a-efc5-4101-afe7-5695cbe9434e", "comment": "Malware payload (Mirai)", "value": "a0f30582410121013dcefbd9dd77e202", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542466, "uuid": "2d4f03f6-daa5-486e-a10a-2289e32351a8", "comment": "Malware payload (Mirai)", "value": "49b23a5a004a963df243807e75a4cb3450c9242377b4eb2f2dfe274a80542dd8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542466, "uuid": "470927e3-67d3-4470-b711-5cf4bf15bc7f", "value": "T14503F151C03A6604C2DE907D48EBBE5FA6D0B01E6454BBFA9689B97D8C33B1B4E481", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542466, "uuid": "37541a2e-97ae-46ab-b0f6-723bac8f2c8f", "value": "768:+wtA4ekApSSGy1ITyzAv+tTmoTu5Jbb+Y88mVW/nbcuyD7UHQRjI:+wtAAA7DAWlTWJe7i/nouy8Hy8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542466, "uuid": "079e7654-22e1-4335-8f2f-133cada0b94c", "value": 38296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542466, "uuid": "da0e3663-d1ef-45a1-8c39-01005f49eb05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f756c1f0-a190-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731542480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "c82b780c-c2dc-4e31-a34f-f17b4fe65d43", "comment": "Malware payload (Mirai)", "value": "fc8fa00d2bab0e54a11de49a7336b374", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "b248213c-45fb-4576-9efe-d0d79afb2c7d", "comment": "Malware payload (Mirai)", "value": "5a4708cbd285f67c685f1e2490fad2b2613b304e0ef493c134236a1df7c38b8a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "1d26a485-43c8-45db-b00a-db8de5e59c31", "value": "T16D13F168370301A9C799D0F08BF403667FB61FFD618688497CA1EB92B9D145CBCE06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "9840fb22-078b-4883-b10b-cefd500d5cdf", "value": "768:NDfzzMwdu3W4CbuznqQd8eYkGyJfH6QhjS0jlDGnHMhgNSRxUkCkHhVeg527tFHb:NDEwdu3ubuznqreGyJfH6QhjDGnHMhg1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542480, "uuid": "1ecdc5e5-a981-4baa-925d-83801e7bccaa", "value": 44196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "ed726b2b-9125-4f9a-b47a-4ecb443d6b5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f74060fc-a190-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731542480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "b8b36723-9f5f-4bb2-aebf-3b4ffca66093", "comment": "Malware payload (Mirai)", "value": "a2704328a12405ec890423b56a54ae95", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "69c6b6b4-2ad8-4d2d-a3cc-5c7e5a4b7713", "comment": "Malware payload (Mirai)", "value": "0f1805bc2402069b538a25fa633bc680090c5dcb8ac930b55b626ee45615d562", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "e39fb027-eb7b-461e-834a-3084ec530c56", "value": "T10013F191CF077ED3E9516E37EBE8989F431C4AE6C27A32137A2906BC4893640D5D45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "c56e1816-24a4-483f-ab93-a99e00845b0b", "value": "768:EnZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXfSwmH9q3UELn:yXwQSYPqFHI8rOjBn4+9DX6wmWLn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542480, "uuid": "dd93910c-aafd-47fc-a5b9-11cb522e70fd", "value": 44600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "c4c96daf-814e-4be4-9b70-1faf1a9a039b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f753e533-a190-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731542480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "f0f6220c-f985-4ae8-b2f0-608cb6ea1fe3", "comment": "Malware payload (Mirai)", "value": "f1846795b47878540ee429146866e204", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "e662edec-1a7e-4e39-bd40-0180facc858f", "comment": "Malware payload (Mirai)", "value": "37dd07181a4bca8cd3e660e88e840f0a23202446278b3a3be8e4e8d769d6b411", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "03683d4b-d9ab-42eb-8657-35b79eba527e", "value": "T189839E61F0146CE5C8660674F0F8ED35471369F123A52CB26EEEE9A188F368DF44AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "5765da55-488b-4d8d-b7ec-4e898fce000e", "value": "1536:DWRU/uih+nyazXUcMnYVohwH5wX6SNmTdEyRZr:DR/F+nyazXenY66L5dR9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542480, "uuid": "5f0c505c-4c47-4440-a2e1-f0ec024d9e88", "value": 82652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542480, "uuid": "fc050a0c-9800-4c1e-9689-803ba7848f27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a48c917-a21b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1731542490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542490, "uuid": "bae597f0-bcf4-4e71-a8ea-fd0100ab1d8f", "comment": "Malware payload (Socks5Systemz)", "value": "d942363324fda86c7a86e56c7204c6e6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542490, "uuid": "026e79ba-2e04-4b4a-8587-aa095fb11d58", "comment": "Malware payload (Socks5Systemz)", "value": "a52dac277304388cb396e23a75e6395850ea7cbdbe71e77868e2a46f996aa03b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542490, "uuid": "7375e1f2-a777-41df-9e70-62f307edb067", "value": "T16C561217B289A53EC4A927354673A11058FBB76DF817BE1627F0C88CCF250C51E3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542490, "uuid": "baed2a79-8bea-4323-8f2c-c3e00db3ea83", "value": "eb5bc6ff6263b364dfbfb78bdb48ed59", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542490, "uuid": "b304bdd2-4c8e-4117-a0c3-a33c26df70d9", "value": "98304:PX4rP/aUDnMxwswoizALSGzthiHTdSEOmG+dQhpZsvnXutGkSt4snAyazx1gs:vmyUxswb9YidS5mG+d6ZYLtVAyav", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542490, "uuid": "83714822-9c6b-4671-a4c2-fee8baba1196", "value": 6101870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542490, "uuid": "5d571be5-fe13-421c-876d-c211246c3b99", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7346e17-a190-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731542585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542585, "uuid": "2db4812c-1e74-44f8-b712-f08618976d94", "comment": "Malware payload (Mirai)", "value": "c5af2574aae2d719add05ee6754ec2f4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542585, "uuid": "3bf55e87-4b4a-4cc7-9af5-e57ddc078194", "comment": "Malware payload (Mirai)", "value": "75bb7cbc9a83ab2dd31d66bcd2557edb0350e65f7764062d40240e3a4cefda4f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542585, "uuid": "0c778fb0-a91d-48cb-af68-e6c633343b6b", "value": "T1930301C779DED521BC704934AA3F0507BE2BBB7CE2EB702491110A35B9D0A42752CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542585, "uuid": "8df2a6f3-8fd2-42e3-b3a0-144c0df5f987", "value": "768:eu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ4onvNs3UozOP:TRAC4fNDdP6N5pd+DtnIzOP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731542585, "uuid": "86fd6fe5-c9a3-4e76-8494-7f8f8a9cc872", "value": 39296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542585, "uuid": "88681174-725f-4695-b76b-6169837c865a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731543008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543008, "uuid": "4c262300-4d4e-4f10-b255-1bf60bb468c9", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543008, "uuid": "30bc4e68-90a5-4b1b-bb75-ae2f4f8c0cb7", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543008, "uuid": "a8933027-7fbb-4d13-8fb3-0f03325da3a2", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543008, "uuid": "e139787d-b415-4144-b2cd-d1e8ddbc5f92", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543008, "uuid": "eeb1d4d3-9ca5-4ac5-9dc3-bc88a4d69b72", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731543126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543126, "uuid": "40726097-0f4f-4cff-9785-7411696ddb3a", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543126, "uuid": "bfc30f5d-c699-4eff-a5b7-d090de151451", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543126, "uuid": "a0ba611e-c9eb-42bd-a620-dbe17b8d367c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543126, "uuid": "7ac756eb-3e33-4e1d-84e2-b1dd0e330ad0", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543126, "uuid": "0fc8076b-9e7b-4659-a200-ec4d1167d5fd", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65f34dd3-825a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731543127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543127, "uuid": "f70dc342-99bd-40a3-b643-9697637afbde", "comment": "Malware payload", "value": "9bb1cbab607d6bc9edbe8e5d75d59ae0", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543127, "uuid": "69b212e4-ce73-49be-b9ae-4a217f5e968f", "comment": "Malware payload", "value": "73dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543127, "uuid": "e8718b2d-b0b4-4950-a162-f4f50d71bf8f", "value": "T1A6D183F3548A6C9F963A0DA4E50863554DAC5E0B96EC807B6F889BB508EE0144CEA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543127, "uuid": "2922374f-86aa-499e-9f0e-238c25c099ed", "value": "96:YniHRdPqB/d64r05DhjDEP1098Xh3eDnERRB+6vaiFwmgNAr/M4:YiOJd6T+3Xh3uEHCQM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543127, "uuid": "b4e592cc-9532-459e-a33b-ef6928949384", "value": 6176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543127, "uuid": "ba470efd-8088-4e08-8fd6-cbef47105e5a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee83cdda-a153-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731543127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543127, "uuid": "3fd29873-f799-4e1a-bec1-ba73bdd5a749", "comment": "Malware payload (LummaStealer)", "value": "1d0553abd27056e00542d60fe4796333", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543127, "uuid": "4cc54764-bb13-4be7-a78a-cebb36fa9418", "comment": "Malware payload (LummaStealer)", "value": "7350f310c06e5676d2e0fcd7e4304c171420aecfcc1e8951a96feaefeed6ff4d", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543127, "uuid": "1d2034fa-bc42-4106-91b9-67d977c9a543", "value": "T118948E7B7904ADB84EBF185268081B1D4C2D38978B74C4D4FBCEA8B9C337C54857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543127, "uuid": "6ae8ef44-06b0-46e4-91a4-4eaa00415dde", "value": "6144:emR+KUqPanYMgRg04D6KMA+EOceKDHKfVWpZIkh43TBDtgxLo:emR+KUqPaYVW0EWjKLKdWfhKKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543127, "uuid": "3c0c87c4-9796-4a64-bd40-f3e4d59ad6f2", "value": 429256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543127, "uuid": "b1c6454e-b701-40b3-abd1-f86a0f9beb51", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16ca8e9e-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731543129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543129, "uuid": "8fff1a7f-f1e5-4b0e-889d-7b2f1ab2150b", "comment": "Malware payload (LummaStealer)", "value": "45814c7b6209ef304da647c2b6473bc6", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543129, "uuid": "9cfb910b-81d6-48b7-84f0-3e5c792d88e1", "comment": "Malware payload (LummaStealer)", "value": "dfd4abb7c5ecfc825aa28a127add1b786bb2653901fd1c1811086ad90a4d4e5d", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543129, "uuid": "83f2dcc5-7182-45c6-9e97-6e35caf030b0", "value": "T143947D7B39086CB84EBF146169092B594C2D38939B34C1E5FBCDA4F8C337C64897B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543129, "uuid": "b58c08fc-a866-4b28-ab60-acd8bc97a70f", "value": "6144:c7fDRyGiEV9xYWZjsgoEDTm2MU/G62zOfQDMuCT/FWmDJadGkuRQwW:06EaWmgDDDT2if0MDYm2DwW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543129, "uuid": "0b7cbf9c-98da-49eb-b713-19a11bc76ef4", "value": 416948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543129, "uuid": "f3a6a34e-a2cd-45d7-931c-544cd9c14ec5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "175cb272-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1731543130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "fb0765ae-a6c3-498f-b380-e0a40387617e", "comment": "Malware payload (RemcosRAT)", "value": "73c6f67688aaeb52170f7c632f5fef5a", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "ff31129c-4eb6-407b-8c7b-cc3de943bda5", "comment": "Malware payload (RemcosRAT)", "value": "82a27b6b5631b7bfe20939636e4eaf6014a8c786793eb37bb3957568739d8a4a", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "6111aa39-affb-48a4-9bfd-a3dd1448028c", "value": "T16FE49FB57D446A9B0AEF09A5B4180B0A4C3C54DBE36491F437C2F0E662670D48BBDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "2de0374e-a76f-4aba-8826-9d1e9eb12d30", "value": "12288:LGxHtou5wVW7CTS7Eka2P8I9GqYhA1+8D984Irnd2FA:LqSVnTS7EkhA1he+K9Arn46", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543130, "uuid": "70971772-92e7-4886-ae13-74c664ce780a", "value": 696848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "e99917b9-ee1b-4323-96d1-24750028bb8a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1792b8fc-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731543130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "1e062ddf-47ad-4946-869d-e7822d82fa14", "comment": "Malware payload (LummaStealer)", "value": "3abeb301e63f3d7f3b186a78a9218e8b", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "07599ade-f38f-40b6-a741-cbbd49063a8b", "comment": "Malware payload (LummaStealer)", "value": "4971b928c40a6f6996c807308b92c43ec44ef0a0fd557184119f9eb22ba42349", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "adf3bf87-0ded-46f7-9ca9-9b429b1f7b7e", "value": "T1FC948D7B7904ADB80EBF186268091B1D4C2D38979B74C4D4FBCEA4B9C337C54857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "c55c9cf7-d697-478c-84fc-fb5e33d999a3", "value": "6144:emRYUqPanYMgRg04D6KMA+EOceKDHKfVWpZIkh43TBDtgxLo:emRYUqPaYVW0EWjKLKdWfhKKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543130, "uuid": "e93f1e13-7d25-4ba9-a6eb-78be8e08c594", "value": 429272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "5984de45-5956-44a5-bf8f-40406a80a90b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "179dbe8d-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731543130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "c9dd17c9-1276-4b21-8cc8-d345ccd48521", "comment": "Malware payload (LummaStealer)", "value": "81408bee603068bdeccfb182b768a179", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "d0200b13-db40-4f1d-b277-ff36280133e5", "comment": "Malware payload (LummaStealer)", "value": "c69fdebf973ff76d04c1d6aad29b9d40f5cf5cdcdb9807780a33bf9af1b65276", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "d70c6bc4-f25f-410f-b0a5-bf16729b00d0", "value": "T19D948D3B6A0868B40EBF152165192F095C2D3943CB74C1D9FBCDA4BDC33BC98857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "cd2888c7-c308-4d72-9db7-144510a031dd", "value": "12288:CIn3XHTabOjMlWkWHeClV+DLRQzrVmrC77/OXC:z3XHTabmT7X6DLRQzROXC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543130, "uuid": "0780d72e-9f78-4047-a18a-8d06cccd6050", "value": 440936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543130, "uuid": "e296dd58-7140-4fa3-89a2-1827b003addd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1731543367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543367, "uuid": "c3324476-e4cb-411f-ae9d-f5d66a5a97d9", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543367, "uuid": "aed7d93d-f0d2-438b-b224-6a18fbb0c760", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543367, "uuid": "e2009ffe-8ba6-48b2-a825-02fd2341d018", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543367, "uuid": "0f33a142-9521-4ea5-aa91-e47d083c0128", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543367, "uuid": "09bfc893-3d26-43df-918e-95ef9df06863", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1731543666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543666, "uuid": "d4eb022f-fa20-4e1b-8836-977e1e99fc23", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543666, "uuid": "fa1ffab0-c3b3-469b-b918-d927fd95c246", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543666, "uuid": "b39c8f42-6812-45e6-b162-0d6411d45680", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543666, "uuid": "3a80aebc-efb8-42e9-a4d7-0a66c1eaf9f0", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731543666, "uuid": "cc15135d-b10e-4013-a64b-08a9368c8a2e", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731544488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544488, "uuid": "81bd8126-5d5c-4c39-9a9e-84fba26429c5", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544488, "uuid": "4532615d-9279-4cdb-b8fb-5bce1f57c8d5", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544488, "uuid": "ebe5ee94-c205-4f88-8704-3efcedac1906", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544488, "uuid": "828e04c9-ca1a-4a24-b6a1-5a8d3af8a410", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731544488, "uuid": "01ec935e-1455-4d87-9ef0-62b9259fc8f9", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "459dca11-a221-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1731544925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544925, "uuid": "1084385d-efb6-4cb5-919b-9b26c5f317c0", "comment": "Malware payload (Metasploit)", "value": "8d644c8cb9c08d33b5efc8e05a8f11dd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544925, "uuid": "75dc0818-3455-4475-adea-86a8d490b73c", "comment": "Malware payload (Metasploit)", "value": "af345887a4ce62f171ce80e9b33e15162084005c0822043cfb98d184f59564c2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "393354b3-7d71-4d3e-95d7-b415958a9e47", "value": "T1BD73C043D8C41466D162217E27B53AB8B6B5F2F63512C18B7A8CC9F5EBD1CB0D2293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "e4bb209a-3aa2-46c7-907c-a49abda42693", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "a263e780-fdcc-44f6-948c-915289d60dd4", "value": "1536:IJ38g1mLWXgJRsdNQBGPkDKfYgPP3VUoMb+KR0Nc8QsJq39:rg1mqgJ+iKln3/e0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731544925, "uuid": "fd06fa1f-ffae-44fc-b2d1-2620436678c2", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "6c1dd8d6-c553-4644-ab86-8ec3be6f0562", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45ad79ee-a221-11ef-afe5-82aee05be84a", "comment": "Malware payload (CobaltStrike)", "timestamp": 1731544925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544925, "uuid": "449dd678-16a4-42bd-a0e4-42475ee845a2", "comment": "Malware payload (CobaltStrike)", "value": "9bc0a18c39ff04ff08e6dd69863a9acc", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544925, "uuid": "a29f4d3b-a827-4e23-a6ff-051ca8825ac9", "comment": "Malware payload (CobaltStrike)", "value": "4088eeb24af339ce1f244143886297968ffebfd431f5b3f9f9ae758f20a73142", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "7fef1b46-d8b6-4b34-bd00-369ea7bdaa24", "value": "T12964BFF19940498EDE988278C4661A7C97582FB213A1ADCA0CBF1BD3934BCD55FA33", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "37229768-11f1-4541-821b-8ec3576e93b2", "value": "147442e63270e287ed57d33257638324", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "175cfa72-b972-401c-8178-974c57846525", "value": "6144:JcZknlzBuhfOxM8P3oB7X/kizr2KWAbIVpnRW1y4/oUgLJkZ5GTSsF7KUt/Zi03J:JcZknZB2SpoB7X/kizr38VR14/oUg9kL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731544925, "uuid": "c692359d-4823-47cc-b2b7-85e87b8e834c", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544925, "uuid": "8dd08652-3e93-4028-bb1b-d3f99daed0c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8a8b3a0-a221-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731545199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545199, "uuid": "5b0a9e0a-2a06-4e4d-a183-8399f1615c93", "comment": "Malware payload", "value": "31c0f5f219ba81bd2cb22a2769b1cf84", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545199, "uuid": "b15951e1-438f-4c8c-9f3d-77a61f7406b4", "comment": "Malware payload", "value": "0deda950a821dbc7181325ed1b2ffc2a970ea268f1c99d3ed1e5330f362ba37e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545199, "uuid": "e57945d8-e740-49b6-9ec2-bc07b4595fe2", "value": "T16DF5D016B2A800E9D87BC03CC5964137E7F2B86A17F0ABDB02A4C6751F276E15E7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545199, "uuid": "8cc7f6ab-793e-48b7-9af3-b9841a17dd6b", "value": "290b5b74ed388a2f4e81683b8fd40b54", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545199, "uuid": "47571e20-643d-4a0e-8cc0-420b1140cde7", "value": "49152:H4VwASO0GtlqbMIU6iwODO3Lx2x/8eimUtQgxvy0ObfF4AFgmpQdPzeHXywHhSCm:Dj+Jq0feAFAheHXHHhrX2ANMoO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545199, "uuid": "00f432f3-5988-4201-8093-ec4da1b5d992", "value": 3643392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545199, "uuid": "7029197b-5864-4e97-8341-50d5fd9927af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e47a5929-8430-11ef-afe5-82aee05be84a", "comment": "Malware payload (AndeLoader)", "timestamp": 1731545766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545766, "uuid": "c9dbd2d0-3df0-4068-bebc-e0512b0d4f11", "comment": "Malware payload (AndeLoader)", "value": "d3e7a887c25ee516032c2961ff8495cb", "object_relation": "md5", "Tag": [ { "name": "AndeLoader", "colour": "#5BB544", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545766, "uuid": "829817a0-806f-4d9b-b0ac-d50e0a9a2abe", "comment": "Malware payload (AndeLoader)", "value": "cc6e52b482888882dfe5c059be5da0d1632c0622501d4ffa671dd4a2b13e033e", "object_relation": "sha256", "Tag": [ { "name": "AndeLoader", "colour": "#5BB544", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545766, "uuid": "d22b9caf-583f-4447-9449-f021bf955520", "value": "T18D72E877A953FCE03BFE7D80A4003D951C983A278B6455EDFAC005A62DE6420DF29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545766, "uuid": "13557af0-b201-4ff4-af20-6c5404680cde", "value": "384:GZu3nEAzXAlXBcc4MojXCSGwnGHuOv60I3:53nbbU0MormwGHzv60I3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545766, "uuid": "5ffefce1-d221-4fc5-8c64-d190bd6d28bc", "value": 17068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545766, "uuid": "25c028ad-afbf-4680-a23a-e9df6c83cf8b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b5d7558-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731545767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "c55613bd-f48b-4aa1-b830-b4c0cccaf785", "comment": "Malware payload", "value": "4f4cc2baf7a98aa5c29c3b21e48725cf", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "ca199f74-c6ce-4590-9038-5200ffe6b146", "comment": "Malware payload", "value": "1fe40914bf08072551be2995fa32e2567b9b394d0dfdb18a9ea99cc9cf3af001", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "40afb9a7-f808-4938-964c-356b7cb06b40", "value": "T14AA3A41178E16191CAECCE31A69FE974C472DD304992F946B8B0EC5DAC2E2C1FF364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "fff6130a-87ab-4a44-b7af-4867e0712b5e", "value": "3072:B9/ZyG8DTUx9iUs+rFguhnrwqlJI3o7lNi:zxyYiUs+rPEca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545767, "uuid": "6c3bf0f4-10fd-4e4d-998a-06bd89dea44f", "value": 106572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "c1117d34-c067-4f8c-b7ab-5f17c7243f6c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b6e3614-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731545767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "655f699d-7cfd-47ae-87e2-09ed90b874df", "comment": "Malware payload (RedLineStealer)", "value": "b5408061679208c4301032f2d016b57b", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "0cc4a39e-48fa-4f8a-bf1b-d5b4af1b4c81", "comment": "Malware payload (RedLineStealer)", "value": "ccce1443eaa13e1290f254fe413de0d8ccc54095fbffff86c820e578ee893f3c", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "2a936759-be72-4d56-bb62-436f5c090008", "value": "T13B834A736207FD9D6F7B0D48B64066A50CAC38475794844CFBC90ADA60EA6A4DF7A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "0962684f-f986-4006-876e-dc34861cde8d", "value": "1536:GkT9lctCrwoDFMHp/BIKVgop0PLxWJKsRAiuvpBwhzxX:G89lnkoJkIwRAZxBszZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545767, "uuid": "107eecf7-b270-48bb-b5c5-bddc90057755", "value": 81920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "c90ff571-1e1c-4045-bf98-745135f53fc4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b74319c-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731545767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "08511924-1420-4fa2-9e74-566dcb0cfd4e", "comment": "Malware payload (RedLineStealer)", "value": "bb2411a5866b5d3aee7da5e143fbb4f7", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "9a57d1c6-85f4-4f71-9e5a-5bd3b19fb707", "comment": "Malware payload (RedLineStealer)", "value": "62ff6de0c77e69cfd83b6e2fba32a263c6103dece9e3ef16eab6898b10dfebd3", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "a63dd68c-9865-4d6e-bbcb-b35437ff2057", "value": "T14C835B336142FC9AFF7B0C84F90426A50CB838575768958CFBC40AE5B4E7654CEAA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "bedb10b5-433b-49c5-80ef-2feba97c0aca", "value": "1536:9Z8Pk5v6yK2jQOJZM2FeBZ0CpNIIITbupjBGJjKU7cS+qE2dO9C:4Piv6H/Or8Z/NIImup8Krrq/dO9C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545767, "uuid": "c76c84ec-357b-4af5-bb50-be16198c2ba7", "value": 82604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "33925e2e-6d7a-46d2-ac32-3735e2a267f2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b8f093a-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1731545767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "e6938d22-60a8-45da-9d15-1e09dcebf2a6", "comment": "Malware payload (AsyncRAT)", "value": "5af7ac402630003f009fbfcebaf795c4", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "32eb0b10-3d1d-4151-8f89-42d84ddb1695", "comment": "Malware payload (AsyncRAT)", "value": "5970cbc5e5c3aae0a844eb233aad28ea87b3b8a58910e225655f6d041f399ede", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "6212ec92-ac1b-4456-9cb6-b921943dbd1b", "value": "T10E533BF752135E8F46370E19E80C1301ECAD95E7B3D9D1EDBF898EB549994688CA0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "1cbc524b-6126-4a68-955c-5e5487528a6e", "value": "1536:JTjWGV9L86PGXOHFJRVwAB9oICGD9/PtlH35MM19WTXPZQKlN:/DUOlJRl9oGPH35/19W7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545767, "uuid": "17acebdf-e7ea-4b97-af03-ef5857d844dc", "value": 64856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545767, "uuid": "8316e924-913b-4c3e-9162-cac2afa9fc61", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3baec22c-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731545768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545768, "uuid": "7a2a4d09-f765-47c7-bbd7-57bfe463f41f", "comment": "Malware payload (LummaStealer)", "value": "89aae35c6d98ce353c090e511ed34884", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545768, "uuid": "ddc4b38d-4f90-4039-ae33-056a1262efca", "comment": "Malware payload (LummaStealer)", "value": "26113215eca8e69cd91ef68ef2e898ab26a16c0f826e0d8dfce49fe32e81d791", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545768, "uuid": "191957c7-8ed1-4bfd-9a1c-28dcac73775e", "value": "T1DD948D7F4245ACB94EAD2812B9492B451C487883C6B4C2D9FF8D99FCC33BC54897AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545768, "uuid": "5e1245b8-470c-408f-ab27-71724fe94172", "value": "6144:mbDdIYl/gATZArV8CvuoWibF40/X3fzQp8h0mO8NnpZTIA95bCpKxCBflht4bZYX:mbDJln2O6W0FT3fzkV8jG+RIe2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545768, "uuid": "9fcc6250-2cfc-408f-b682-a1fdfb3a501c", "value": 415744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545768, "uuid": "83265f02-bd21-4acb-8f89-1a3be26a6618", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55ee42c1-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731545812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545812, "uuid": "aaf6fd25-7ddd-4c58-9434-95860439a20e", "comment": "Malware payload", "value": "c2fea17569760cacbb2ee450dad67869", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545812, "uuid": "a45463f3-e3af-4109-9568-607bdf8599da", "comment": "Malware payload", "value": "d7f1502a69ec2a3c8c58f5e1e626eb723432f0e25227caee648b80eb03a1e9a9", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545812, "uuid": "7ee89091-8ed9-4347-8c0c-c38a872dabf7", "value": "T11F34F114BACF38C78A9A395D3C081E8CF11EAED5914DF660A433CD7643BAD9C98617", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545812, "uuid": "78216bc6-fb2c-412b-8b59-6fb02680c814", "value": "6144:TTPIuuGmT9ztTvRf7u96alTxFioB6c/ISC9Yrxs:Td2JzR696aNLDj/ISC9Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731545812, "uuid": "8823e813-37e8-43d0-b063-f04194a9e391", "value": 247888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545812, "uuid": "c80893b0-e7be-435d-87c1-f322f50fbc4a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11862e3b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1731546066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546066, "uuid": "6ded7208-93aa-4c71-90cc-3fe8f63f6918", "comment": "Malware payload", "value": "4e52d739c324db8225bd9ab2695f262f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546066, "uuid": "d959167a-9340-42ec-8140-21ee54f8f481", "comment": "Malware payload", "value": "74ebbac956e519e16923abdc5ab8912098a4f64e38ddcb2eae23969f306afe5a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "8542703d-ec63-4423-ab8f-2ea374376553", "value": "T102445942B581A474E49238B5315DB73A2C3A5621B3E5C8C7EF81AEB01E642D36F3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "8af8270e-6045-4b96-9db7-a36568f12944", "value": "32ef7516974ac0c43943c0635266c6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "80dd28d7-127c-4252-9b00-1a59dd971510", "value": "6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731546066, "uuid": "070855ef-2cf9-43b4-acc6-de881e4941ab", "value": 257872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "59157bdc-7fd1-4738-aaf3-649af1d09329", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b0283-604c-11ed-a083-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1731546066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546066, "uuid": "a55256f7-83b2-482c-86b2-3e2f583c99dd", "comment": "Malware payload", "value": "1f44d4d3087c2b202cf9c90ee9d04b0f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546066, "uuid": "ce6fffff-bdc7-4672-8a4a-a0f25236b546", "comment": "Malware payload", "value": "4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "0f7ed0a2-3979-49da-a22d-b3a56732e00a", "value": "T1FF356D4AEA07AC7BDC5302754617E39B0575DA70A833CB8BEAC81D68DEB3DE116097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "7dfe5629-1c11-48df-a401-07169e37edd8", "value": "e727d00364cd87d72f56e7ba919d1d40", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "fc06421c-f682-499d-9816-377c78d53768", "value": "12288:dxylSMUMifofI9ayCvcZMBiMjCodEMdo8R66tCWko5+jsbFcoYuprzpGSgGSrz:d4AMB3caSZMijBI1CWkoj5auF5gGSrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731546066, "uuid": "4d042792-c847-4f5b-b34b-6bbb605b40cc", "value": 1106998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546066, "uuid": "37d00533-ee0e-4baa-9ddf-215f48d35323", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20241216-a224-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731546151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546151, "uuid": "1ab6987a-9f46-45d0-8a40-85a8ecc50baa", "comment": "Malware payload", "value": "d3d55218ed1162075a55143ece9dc4f7", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546151, "uuid": "dc4b4005-28bf-4df3-a910-0845b5767c2f", "comment": "Malware payload", "value": "c49b748788b83008d19ce1024aa4ea1deefae2aff3389cbf60517f4674f374be", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546151, "uuid": "7bd009ea-7125-4df5-9f90-560218f5be5e", "value": "T1A634E035A0EB0D7C629FA527DBC5379616B30A07BA486D2A32318353C767DBCF0AD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546151, "uuid": "7d32a90c-e298-4263-9448-95da52f0aaf5", "value": "6144:StE6R6QNHWhy87456LmOi5YQuMYf7ly7TrXOUi9x:P6R6QN2kG4cqOwaMWT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731546151, "uuid": "5ec3f64d-91c3-4f3b-8334-95b94aabe54c", "value": 247891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546151, "uuid": "9c6d4ea6-e178-4f24-8586-69dffce83157", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f76ce5fc-a227-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731547801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547801, "uuid": "63d9cdbd-756f-485f-b360-50788ff8608c", "comment": "Malware payload", "value": "55c184b8493c489a77879537fc098306", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547801, "uuid": "f017c805-0282-466d-a2ad-4620dabd4784", "comment": "Malware payload", "value": "1e002e6493326ec376cec3370ddb0d51494beab55413bc952fcd324d6dd10c68", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547801, "uuid": "4ed73f05-6faf-4932-a3dd-4c0554d50dcb", "value": "T1CF95331D436236FBD50F86B7066AC4C4B6D653C8D5C9D9C91B0A2A398333E3B6B138", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547801, "uuid": "33954ac2-2602-40f8-b606-634d29594b13", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547801, "uuid": "7eb3f05c-bc49-4867-b316-2dedec2ebbe4", "value": "49152:FObOEHaybvrWwTuIYeLHLYhQMb+aHMSomA:FgHayTacxYMU5b6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731547801, "uuid": "f03d39e0-a2d5-403d-9c05-382108227f90", "value": 1933312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547801, "uuid": "3503a53e-4995-4a4d-b161-8fe1e13d7ece", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39bb57de-a228-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731547912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547912, "uuid": "091c3374-aac0-48e9-89ba-236ea2db294b", "comment": "Malware payload", "value": "a40799787d2e713efc74a1cf0a06d614", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547912, "uuid": "0546ecf2-8051-495e-bc49-8e9f2d276915", "comment": "Malware payload", "value": "9c89f7a7fe6f9f7ba5b1906ab9cfe660be6e2a3327ea0f25dae21cabbc913b30", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547912, "uuid": "22583db9-43b5-4920-9bfa-dda12671df92", "value": "T1DCB31290A59D2FB0DC39999B1009ED6062A319CFD2378CCB5393EB7802B7F9656668", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547912, "uuid": "7050326b-e1c8-4dad-95b2-ce885c14cc5f", "value": "3072:8gGDl3sPqJm2dyUyPlY9bkzW1zw2uoEiP2jZ0uBywvcRQfYiF:8gs3w2dyUyCwznyh+jZ0pQnF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731547912, "uuid": "befa049f-62e9-4f87-acf9-2127b11909fc", "value": 112384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547912, "uuid": "e780346b-1122-435b-8749-0335291407a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44c43d24-a228-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731547930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547930, "uuid": "f8c5860e-e524-46b6-b343-886271e25011", "comment": "Malware payload", "value": "b541ec4bd7fb00071a5aa093801771ca", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547930, "uuid": "f7592f24-b070-4e65-ae92-ed5ae1b62c7d", "comment": "Malware payload", "value": "70cbbc1f312857009a83dc2334e94c6bb3e2ecaab28462556cebd8bf700c5ba3", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547930, "uuid": "11a91ef9-6ee2-459d-83f7-87dc3f3d3085", "value": "T1C016337E3461E302D8575F36438BCF855A70C9EAC5FB2DE4A3A739B028AE431D4D82", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547930, "uuid": "7dd1acbe-eeb3-4bbe-ae8e-4e2daf510609", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547930, "uuid": "2cd1eac9-f874-4f42-987b-65b45ed9bdfc", "value": "98304:vm63JJLYj996vVlSV1oBAnWP3tVESGmc+YXWCiZEnutCFk6PO+:+65ZjvjSneiWP3o8nDCu6m+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731547930, "uuid": "192016a2-034f-4672-a848-4083c25fad16", "value": 4369920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547930, "uuid": "82b9e50e-c26a-40da-b788-4dcaa96a1390", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cfe8269-a228-11ef-afe5-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1731548051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548051, "uuid": "a56c53f4-47e9-4499-a1be-ec1ea15fd816", "comment": "Malware payload (MassLogger)", "value": "4f80565082ea4d95d933decf9cd50c61", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548051, "uuid": "b2e701f6-12d5-4c58-b23c-df6e6fabd401", "comment": "Malware payload (MassLogger)", "value": "d854f347061d9d7b8a9788ab8633c3f07619e29bd440924507a0147484c217c3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548051, "uuid": "87e9ba76-e44a-4b4e-a267-f8913f726dbd", "value": "T18105F15876B89813DABE46F60830C67903B16CAE6021D3CA0DDABCD77EF4F189541B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548051, "uuid": "4f1901f7-1438-4ed0-b41d-6bb751e02707", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548051, "uuid": "bffed08f-5a82-4283-b828-b8ff967fb050", "value": "24576:cmCJVCABws3ok2B3KE0cZICs/dZvo7sK:cJ0ABsB1P0wICsVIs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731548051, "uuid": "1cd16de2-a008-479a-836e-85222b6a4b0d", "value": 801792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548051, "uuid": "2188f693-dc00-4f36-8da1-2c7111f023ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f22f7a71-a22e-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731550798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550798, "uuid": "8301f257-fdfd-4dc3-af5c-22c5cdc11597", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "d85888189ca841d3ca6376bd2e2ee40a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550798, "uuid": "33036a86-a5cf-45a0-847c-8ecbfeb2851f", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "28c6a77cc59ebe469a6a4652fc80e3c2202612c4739c934919d13516b0d1ee92", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550798, "uuid": "8f1634d1-8fce-4ad7-9502-18424272cce4", "value": "T121C4DF22A2F12915F7B78A354B3AD5D4262FB4A22F7762EFD110561F08732E18DF27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550798, "uuid": "954fc596-ea31-43a3-aa88-344933ebec40", "value": "7c972796fca470e939012a0c4003b690", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550798, "uuid": "d7a99946-0630-414e-a542-40b798743be7", "value": "12288:wM/1hHLMj29BvjmuKru5NQaGTFELKzMLtcpnfpGI:wCrrfvjmVrWSjZEL9ynh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731550798, "uuid": "ba00a5ae-cf22-4560-bce9-dba89449944c", "value": 565760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550798, "uuid": "8900ca89-ed5d-4348-b48b-1127b1929b9d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e04c422-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731551919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551919, "uuid": "3a90232a-999f-4bc3-acf3-27c0327db4bf", "comment": "Malware payload", "value": "b218562b4ab4b0e73e571a9ec4dc6e6d", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551919, "uuid": "0a9f835b-b292-4b6a-b7de-c422ae318642", "comment": "Malware payload", "value": "73b8a82dc079ebca63efeafc9ad37b76b4a3fec7f65f5fc2c9a9792cfe765241", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551919, "uuid": "acf26077-e67f-4721-a2e4-3f186eb0c425", "value": "T12634BE6FBD25A7C472DFAA05DC639283E772DC0A2F50D5BE42441136C9DE3089B4DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551919, "uuid": "59ce28d3-42f5-407f-a93a-b8c88b3cdfcc", "value": "6144:zhcY1glmi+WqkiVm1PkwgsCwCOCktm9TxEl0iJbw/7:WYKlb+WqkIsPkiTCaqxibC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731551919, "uuid": "a0295401-6d71-4976-a9e0-57868bbe8f0d", "value": 239696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551919, "uuid": "5eb62352-afe4-40a9-949d-d559ca9b130b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5602c23b-a230-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731552146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552146, "uuid": "8596f67d-37da-45ed-ac86-0b7ec0f2aabb", "comment": "Malware payload (Stealc)", "value": "c2e652b53e22381677787eed80a5220f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552146, "uuid": "5af88dff-98fc-444c-81f8-76ec6ad9af0c", "comment": "Malware payload (Stealc)", "value": "c3bbabde6b5c2eb2cd3efe94c544a6ba84e249dbac7d03f434fb7340465b0426", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552146, "uuid": "f3f23600-99e6-4144-b029-c19fe458f37b", "value": "T13F8533E46DF304B4CFDEA73013A6D31BA759BED584D1C1A99A23A3D1C41073A5BA80", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552146, "uuid": "61b65f58-c603-41b0-a862-669e37277a9c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552146, "uuid": "06fc4d0c-04f1-47e0-9287-9f77585ccc6f", "value": "24576:v3wXvZ49UvkIXFZqpVFl9LwGvllJXjJk+WyEibr7XAN3y4wbDTjSlTcanbVHiVzo:G4k7XQ5v1zJ6JiO8jSRbNNs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731552146, "uuid": "b301c0f5-f5fb-41ee-affc-a917fe331c0e", "value": 1789952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552146, "uuid": "a0ed4608-0d72-4883-a977-ee8176d4c131", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b965698-a233-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731552800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552800, "uuid": "4a8b9a91-8b52-454a-a306-50c20ad41902", "comment": "Malware payload (Mirai)", "value": "f3e31c144e5f47936bbec51f8657c15e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552800, "uuid": "983b3cf9-3917-4cf1-8368-a4f5bb4ba3c6", "comment": "Malware payload (Mirai)", "value": "0a7d443b249975b9290e340c818f2d66b4592482a10ac746cbf17cc175f5e815", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552800, "uuid": "d06460d2-2df3-43e0-9a3a-b25b7e0f620d", "value": "T1A731DFD1A3D05D7DC8E411BEBE5B0354B378AF00E0CE3222822C67286D2AE7D5D374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552800, "uuid": "456d8170-3506-42eb-906e-aca3f49c8151", "value": "24:uAd9KGpa7Urz/jlf+F0AXK1hH9Vev3gRGaJ9i9BBuLlgCk9gD10yd:uA9KGpa7UrLZ+FCI+J+Bu5kE10yd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731552800, "uuid": "12ce7313-d313-4f9f-9d3c-9662337b73ab", "value": 1500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552800, "uuid": "709f06c2-8220-462f-b71b-d9524b221c63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fd13758-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731553156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553156, "uuid": "46d98eb9-fb59-43bf-8545-7f34e845ee95", "comment": "Malware payload", "value": "edac279da93dab7714e7cc9980aa3b6e", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553156, "uuid": "e9e93e47-5f02-4fbe-b67e-f1abb228eb48", "comment": "Malware payload", "value": "b00bd7a04b7af101b2b2eccfa0e6dfbf31ec5e6b5c91a7776cbaef87cd936295", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553156, "uuid": "f02629cb-4b40-45e2-a8ca-b19dde70fa79", "value": "T176E538ADB40472CBCC8B17349C27CDA1D92D0BB687210BD399EDA4BA6F73CC515A6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553156, "uuid": "0a9c004f-3c6b-4cef-afe8-209cc25fb842", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553156, "uuid": "f1491bab-9d0a-484f-8996-cfde2f2ee877", "value": "49152:s+K+o+EHfVQ6ISp5e8DmeW0o9Ory/d2pOr9SB0o85:fEHfO6ISLe8DmeWf9Orsd2o9S385", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553156, "uuid": "02f12baf-9784-4d44-89ca-68f434c7edef", "value": 3160064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553156, "uuid": "1f59f479-c2bd-4348-a7e1-5898434fd1b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81ef756-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731553278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553278, "uuid": "9d030471-006d-48e6-ab42-765e24765968", "comment": "Malware payload (Mirai)", "value": "82ac740d3d4b4e38f9258c9bc03caa67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553278, "uuid": "c7619a89-726f-4018-8e7e-7f03ca55f086", "comment": "Malware payload (Mirai)", "value": "a294624904b308bedf1c0497c411a28fc45d89f67c8c1017801121b847bf778b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553278, "uuid": "39405157-54ed-4bc8-98c9-88f547bd95c7", "value": "T11621FE00F21D1813F5E13EB473372B5197BA8F13161858089B9FE79ED8B8C31599D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553278, "uuid": "85435ea8-b0ec-4a17-8fda-47540f68898a", "value": "24:3eAxpWS9nSWZ6S4/KSwISBd6oTKP5tAFl4faqzktqKcvy5EaaTo0YOmCs26hB:u/gZVbXGA8fz2qKcvy5EldR+B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553278, "uuid": "1252485e-d8c3-47c0-8e17-d70598066e44", "value": 1404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553278, "uuid": "b046bfdd-3c1c-469f-acc4-92eb956180d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd8df076-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731553314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553314, "uuid": "72370602-d652-432d-8e4c-f3b6c4c34e5b", "comment": "Malware payload (Mirai)", "value": "b94c0590a187a2d89130c76aaae4d3c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553314, "uuid": "a92ecb77-90ea-48b7-b15b-bbb278f3908c", "comment": "Malware payload (Mirai)", "value": "3011d55e1b36e363169dd7a36e95f11d7451d2170daf9b7bf2fa9b6c1aae7eab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553314, "uuid": "2f6895b4-b576-460c-b08a-3697e3c114f2", "value": "T118213247B184AD58CF28DB3C5F711A517B05D5B4C80FE3DE4E0C46BA591B38C66500", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553314, "uuid": "a0c27005-0904-4842-b8a2-e0abdad20061", "value": "24:wa3dGtSnUpzzbBWpzmIbKBB5gDrmVvGdikC7m17DC9Nfq:wa3dxnUpzzbBWpzmIbNDrmVvGs772q9I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553314, "uuid": "8a9f48bd-e381-42e4-ab9d-3ef46fdc9c4c", "value": 1196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553314, "uuid": "ec110731-ccc9-4b7d-8c0a-9b86bdbec28b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5066d8c0-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731553533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553533, "uuid": "1ef97e2d-a4e5-41e8-9af5-e749f0b7e68e", "comment": "Malware payload (Mirai)", "value": "1fd1d4c09b1c1026184e73fe59e83d8b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553533, "uuid": "fb7d9754-61f6-427f-9fa5-b9056eccc84d", "comment": "Malware payload (Mirai)", "value": "f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553533, "uuid": "0431585c-97e5-42d5-b9e0-478dee144eac", "value": "T15633F1B692ABAD71C57052BB1639649D64152338E3E6F003572544B0EACB1F38AFE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553533, "uuid": "e5280a94-7152-4411-a69a-81ab74aac48c", "value": "1536:uCoqsGR4eB3g0Vmh1IxIpC8JjL9VE8amFZP7R3Q:Xoqs2Twh6P8JjLJ9ZP7R3Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553533, "uuid": "3cd09e92-1fb7-4531-9005-5e32c582db53", "value": 51444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553533, "uuid": "2f751aa6-fcf6-431f-9b53-869d415c73c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "816fdf91-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731553616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553616, "uuid": "c4f16524-f807-42bb-8f43-49952d63d1f9", "comment": "Malware payload", "value": "d43df58ef53f8c7853281926ab0da63a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553616, "uuid": "344a5f02-d155-4e0c-9e45-136aaa7f1b36", "comment": "Malware payload", "value": "0b24915811091b00affc2f1fb59d58003fc4440fdb0abe81b7fc4eac90edd27b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553616, "uuid": "7b0e99a6-b6b8-4cc9-9e64-0a683e051bc5", "value": "T13301A2A4B0A306736ECD2C4F7A29E85D205A70E74A0B9BDE2DB8E11DB2BCD10E1211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553616, "uuid": "2d2bb1a4-56a5-4831-a1f7-f31e81894d6c", "value": "12:l65Sc18HZaKLKfcNIh5igzLW11BF57EuF8bqo4:l65OK0NIfXzCBwzd4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553616, "uuid": "01851ca8-5398-4462-a437-97885055eedc", "value": 684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553616, "uuid": "38b50e6e-53d0-464a-8735-3d9b97f628bd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c65838d-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731553823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553823, "uuid": "a6948f36-6660-439b-8445-6feb3ed23003", "comment": "Malware payload", "value": "ccae30788f4e85c07d21409c52929bd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553823, "uuid": "acecd214-e7f9-4a4f-ba77-360f28bb2f81", "comment": "Malware payload", "value": "7e5e0829f6c6740ffe91307ec3783172517b812de9f348fd98374b1a66b1237b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553823, "uuid": "5e393029-8885-4c7a-bb2e-47df28e937f9", "value": "0EA2F18727983743A46355F4F27CBF8A72023EADAFBE582B40453163706311FA60887B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553823, "uuid": "f03a7ad4-7e41-4b9f-8af1-1a5374a48fb7", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qs9Lrg:YTYIDfYG6ZmewZ59+Nw1qsRg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553823, "uuid": "e08a48ee-866a-4f22-8f04-591fa9842e17", "value": 23168, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2549a635-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731553890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553890, "uuid": "41f78e35-e9ae-41fb-a645-9bf239c2d43d", "comment": "Malware payload (Mirai)", "value": "6de76f01611f77dc9269ad1e0729efe3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553890, "uuid": "25f925f9-3575-485c-a8a7-9b4952c65677", "comment": "Malware payload (Mirai)", "value": "8fdc1b9e469b6927ab76f1910d4d01f95154b13d5d3fb80de2f11a8a732f9d53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553890, "uuid": "d163e755-ecdf-41a3-9bdd-3b018f4ed2b9", "value": "T1D821A8A6A3E26D1BCD880637DDAB5B50F322BA44859EB813E35216190C7E30A0F310", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553890, "uuid": "7c527f7d-c62a-47b9-a26a-c94768a1569a", "value": "24:JKD4llMRgP9qD0at6EoKGyg5rUlFSy40VzLCkIddx2HIRGIUdCTNfW:JKMTFqDPtjg5rkFSy4CzL5IUgTNu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553890, "uuid": "ec2ef792-3066-4c13-903e-5cc13877385f", "value": 1168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553890, "uuid": "1b8697a1-d4ce-49db-9a7f-111cccd4bf89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "656acefa-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731553998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553998, "uuid": "3736f173-26b5-4b6b-8d99-2685f36aecf2", "comment": "Malware payload (Mirai)", "value": "c1d2dc8e7e1be67babb6396c643647c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553998, "uuid": "1a12f47f-5682-4a1b-a31b-545b80d2661e", "comment": "Malware payload (Mirai)", "value": "37af77f7a68281ee447229b93af9848df6a1f428438b8008db561411bfcc4aa5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553998, "uuid": "46e0c020-55e2-4a07-8aa5-4f6fa7a4f5da", "value": "T1304114191F901F33DDA6CC36465A2B563ACC802B716A23525374DD64BD2E605E7D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553998, "uuid": "e9fb8ccf-01c3-47cd-acea-56af98575c7d", "value": "48:APQ2lnuDW3B6df9ce+SMTLWPkeTDjFeXp:APQUnuqYf9cjSoLW7TDM5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731553998, "uuid": "ba7e4d36-066e-4e8e-8c0b-e72756addb91", "value": 2032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553998, "uuid": "15196b10-f719-4680-87bd-a16823f06c6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f53eda46-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731554239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554239, "uuid": "5c304bb2-d47f-4280-a444-f184790e6290", "comment": "Malware payload", "value": "a1545622e5c7a689f78a509323a1e7c8", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554239, "uuid": "605b4a35-adb3-49d4-86ea-078c184485f0", "comment": "Malware payload", "value": "ac7ce7057c2b709ce675f92448b7f74dd86eb7b0c9f0b25d93ad9c64b0aa3c6a", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554239, "uuid": "86be511b-1218-4639-8e82-fa65cd9e6f80", "value": "T1A634E0D5DB1BAC239707E69674EC83C118D226A0D4A5BA503FA68F0D078E5C1BB1C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554239, "uuid": "0d1a5dd4-2134-4a5e-99da-d3fabb85055d", "value": "6144:1h4qUwpfE2faEgvfH69EGrOg0W2LDIjW7UOwb69jWX:1hZUMfE4ah+zrOG2LkjY7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731554239, "uuid": "6065d0c5-ce89-4434-9bec-f6d3a902a273", "value": 247880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554239, "uuid": "2ac3e41a-4b75-4de2-9e02-e14d99c9a781", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa98d881-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731554248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554248, "uuid": "cb94530b-f39f-42c9-ba0a-60b8a7f98867", "comment": "Malware payload (Mirai)", "value": "41e0d5b15df7e211801c3b584818fb0b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554248, "uuid": "0394f72e-dfec-4e91-9092-17f02a74743c", "comment": "Malware payload (Mirai)", "value": "955ec5fc1dc0fd9c0dd342e1585c994f5b067c807335a8dd58436cf5487b0db3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554248, "uuid": "788bd787-bcc4-4bf1-b39e-bb5c270752f7", "value": "T1C4B2E171A2863E72D770313A693CCA0157BB57F8A4EA72753524B7AC4BD2C4760781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554248, "uuid": "2a30aa2a-d7e1-4975-afc3-6b75c52bfc9a", "value": "384:5ZUX11S49enZh57fYONQ/yQVQbFxD+ckPvDxqSwPzMvdVH8hymdGUop5hKy:UX1De9kONQG5xD+jHMDzuV8s3UozYy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731554248, "uuid": "dc269d56-bf89-490f-9648-9de1ac2a13cf", "value": 23732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554248, "uuid": "5e39128c-3ce9-40a5-9a27-de56ea6f9dd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bc99ebc-a238-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731554787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554787, "uuid": "ec76d94c-8459-43d8-8156-6c973c0055be", "comment": "Malware payload (Mirai)", "value": "25013ae225795b0dba904ae7d088cc0f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554787, "uuid": "66f05a99-5378-422a-8967-f9a13cc13c41", "comment": "Malware payload (Mirai)", "value": "124b3d90bd3a5b90302a0dc5d861173f7163aa856d8eaa3f839fb841a808e13b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554787, "uuid": "dc8ab2a5-0978-4771-854d-9847d29e95e3", "value": "T1F221353AFBBB8B1BC89090390F6363543360DC580014D2257F617B0DCC026116F951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554787, "uuid": "a79e1aeb-9afc-40c5-8e5d-3ddb61da174c", "value": "24:3jvDq3N0yTK+59k2c8MAQOlhCrjSkvFSJ9lpCkNTawqFk:XWVT3bc8M5Dv+9KkNuPk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731554787, "uuid": "971b2aeb-4c5c-42ea-b0fa-b558c2f47b7b", "value": 1272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554787, "uuid": "0ce7cb2e-5793-4db5-913b-0af97d3ae91e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46aae7f7-a238-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731554805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554805, "uuid": "f5624aca-cabd-4e4f-acd7-abbc8a45b657", "comment": "Malware payload (Mirai)", "value": "2833daf1851a5b4ed26942b5ae601864", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554805, "uuid": "ee152e35-0a0b-41db-a4d2-8457551c5731", "comment": "Malware payload (Mirai)", "value": "5cea0e2f93b963c06edde75c84562e8738fa37f3894385c63edbd4c19e407bb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554805, "uuid": "a2c4b137-9e6f-4665-8a99-37ec5e7d08ce", "value": "T10821CC4DE3596D8FDDA71578682B022A34207A4AF4039413B36A8E3FBE7B1D4131B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554805, "uuid": "25eba99d-e1ac-4a57-8d7b-bb41311f7b37", "value": "24:35Aa8DzSWPpbP78Pwy74+CiCTHMohHCJtD8ECAfGrioxn2h2NT1sRAW:pApP3hb/mkTMohiJt8DAfPZh2NhAR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731554805, "uuid": "fe610583-55d0-4023-bea7-2a489c5869f8", "value": 1244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554805, "uuid": "5bba117e-7a48-4f10-bf1e-778941dc1d5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c66de95-a239-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731555298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555298, "uuid": "7618ca84-b3df-4ba9-b7a6-fad2dfe34eca", "comment": "Malware payload (Healer)", "value": "ffe392bd5ca5cd6bec80fbee1ff8d955", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555298, "uuid": "a611f6fa-bb55-46cf-b0ad-dba5deca242f", "comment": "Malware payload (Healer)", "value": "43918337cbc96f447f0e685ee5cd8dd04cdcd73fd9aa53efc10ea37daace130e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555298, "uuid": "d88dab59-5e61-4456-9d74-d612277f3e00", "value": "T130C55B92F504B2CFE48E1B789567CDC2995E87BD072548C3A86CB47A7EABCC015B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555298, "uuid": "acf2a9fe-6177-43dc-a014-9e35a9a7875c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555298, "uuid": "f7198964-8add-4c6a-afc7-d5724bbf4118", "value": "49152:7SLtk+KtKcUZTa1dJgE+Lnbq08lS6JyYCEBlk/:2Ltk+8KcUZTIeL+b5CE/k/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731555298, "uuid": "9f672fe8-c59d-47d8-9dfd-6c7e77ad1702", "value": 2724352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555298, "uuid": "e14daf8b-0874-45b8-b6db-4b95f9f75a66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46c4cce9-a23a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731555665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555665, "uuid": "9f6106cc-b8bb-43e3-a59c-b6b65e617801", "comment": "Malware payload (Mirai)", "value": "d18b4e896aa68210cde17776bcd3a969", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555665, "uuid": "dca85b8c-967e-4a57-b798-3cb56c987f1b", "comment": "Malware payload (Mirai)", "value": "32090c32e57604cfc2989c6274877e0f9d2dcb16f18059067532ff1b49a09193", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555665, "uuid": "ab535032-9f88-4a06-8e29-d628774a9898", "value": "T107C2E1A285FAC617CC63437E19381A7350681C54E74DDE2E172B9ADC52884E72BBBC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555665, "uuid": "4c0ea7d4-6aee-4b79-804f-a3894501a60f", "value": "384:Ms79WXUx5+bkbRaliVErjrL9VD9jPwrSaf5bwIB5/8x2BYFydHY0sNDZvzbSNHcW:X5+Kcrb9VDJef5Q2PdHuzb8HoEPb6Qug", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731555665, "uuid": "ec640079-858c-4105-b776-7cd9912098a3", "value": 27712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555665, "uuid": "bbfb0305-b13e-46ca-ac6d-e93944a110b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2797bfc-a23a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731555818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555818, "uuid": "da34cfdb-6288-42af-bf08-12b4a342f155", "comment": "Malware payload (Mirai)", "value": "022a324efab4c0a8073fce5313dd15f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555818, "uuid": "84fece58-9911-4e86-aeb8-a97165cb6867", "comment": "Malware payload (Mirai)", "value": "11ca65fa85fe6de457d31a732fd2234f1be455b36c96c0a5a5d3f4db8e063003", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555818, "uuid": "408c5a72-7563-4c44-9732-c185943b1492", "value": "T15E21CB9667E35E17CC880277DD9B1714F322AB44859EF403E35106150C7E31A1F211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555818, "uuid": "d7cbedc1-c8eb-4fc7-aeda-680df84185ae", "value": "24:Ji2tVsgP9qD0at6EoKGyg5rUlFSy40VzLCkIddgHcQI5C+Nfe:JltVFFqDPtjg5rkFSy4CzLT1IU+Nm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731555818, "uuid": "edb442b8-79e1-440b-845c-75c36c0c9a1e", "value": 1160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555818, "uuid": "356cf8e5-28fd-488a-b3eb-7d68ca4a5555", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42d2840b-a238-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731556192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556192, "uuid": "3c54f8a2-26dc-4735-8d55-203c51342c9f", "comment": "Malware payload (Amadey)", "value": "59d6936a7cf3bcb1a47d5c2578ed349f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556192, "uuid": "a1f48b87-9263-4ed0-ba4a-bfa24bdecd9c", "comment": "Malware payload (Amadey)", "value": "1e1cc9faa8264d448f764470e3e69dd3eca39b9cae9ff05d26f50bf2d6e4dc1f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556192, "uuid": "b80807f9-ed37-44d3-aa05-75f803ee1a08", "value": "T176E529A27D0DE5CBD44E127855E7CD819C7D02BA1B3219C3A9296CBE7DE2CC01DBAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556192, "uuid": "70e1678f-625d-46e3-a4b4-49b233d73ca1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556192, "uuid": "d3bfadb9-5ed7-45bd-ac85-d350ed90c026", "value": "49152:wClOMQ8bgatnoQFWzEd4r3OqI+DsefoG0wLfUF2eDz:jl88bgatnoQFUEdW3x/D1qm8F2eD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731556192, "uuid": "451dff65-6418-4bb2-a75e-dd837035b17c", "value": 3308032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556192, "uuid": "8d2ac18b-330a-4de8-a66d-61533beebe4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731556632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556632, "uuid": "40a74015-8a17-4c18-b80f-4da300f296d4", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556632, "uuid": "bc9570ce-c6ff-4281-b63a-7daa307f351a", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556632, "uuid": "3a9c895c-b70d-4bdf-a5ea-23c04a54a825", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556632, "uuid": "c49bb034-eb0b-48c9-bde2-29aa64b0f2c3", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731556632, "uuid": "ffb833bc-efc0-435b-82dc-3795953c71a6", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "167d087b-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731556912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556912, "uuid": "d78b52bd-e79f-49bb-a4fb-b6637909fa03", "comment": "Malware payload", "value": "94ad481914185828386b1000edb2edef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556912, "uuid": "3574d0f0-4ec6-43d1-8e4c-a51793369c29", "comment": "Malware payload", "value": "1f48514510e82de6011f281ac4c134c3ee3bcf8f928ac14ffef4fca3ee0bdc59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556912, "uuid": "9892bbaa-968f-486f-acdd-a07a16381b11", "value": "03A2F146269C3743E56255F5F37EBFC9B2026DACAB7F582740582123606315F62088BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556912, "uuid": "e8088c1f-c80a-4cbf-abe4-4b54848737da", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcXBOo3g1qsy:YTYIDfYG6ZmewZ59+Nw1qsy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731556912, "uuid": "0bbfff0d-3dcc-488c-9e33-313ea0733419", "value": 21720, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3880bf52-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731556929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556929, "uuid": "da400606-e2d6-40bc-a20b-86beb2f891b0", "comment": "Malware payload (LummaStealer)", "value": "5b015748645c5df44a771f9fc6e136c3", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556929, "uuid": "a79a0fa9-6753-47ae-a25a-36bb2bd14580", "comment": "Malware payload (LummaStealer)", "value": "622c5cb9a11085da8240c94262f596b687b3ecc2bc805b7f5a01cc335f7df909", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556929, "uuid": "4e7bdc23-5b8e-4cc6-872a-ac8a0e81426d", "value": "T1758533364CA8E134CC8CC33B6187C9E4B5B57DCE01D4659F29322BD4191EAB36EAF6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556929, "uuid": "afa3bd8e-fdb7-4df4-8454-fa623e4dd8d4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556929, "uuid": "d8a08c8f-be50-45f8-b013-370c7d4a598a", "value": "49152:2wkR2JwQQ31jBTI0ynNWfoOMNGEQhNnhA6jrubp0vML:27R2UjVMNAgNGEQhXASrut0EL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731556929, "uuid": "7c4bee5d-c414-405d-94dc-4217fc6ee555", "value": 1871360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556929, "uuid": "271a3e60-8ece-43e3-912d-def7e21e2670", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "390c2ae2-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731556930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556930, "uuid": "cd421827-da2e-4a79-b8ec-4ee1539d5fee", "comment": "Malware payload", "value": "59f7e20a2beeca185aca6f42c98c9a92", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556930, "uuid": "6e6a6c08-ad1e-4de6-b93b-e2202538cb3a", "comment": "Malware payload", "value": "cff09ddb00f714663ab3ad4c73bc5588965b161e325d026c3331852e4e01362b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556930, "uuid": "22982568-a94b-4f84-8e63-2345d474a203", "value": "T114863360EBA1BB6341B78F391FB7893974C61767AD7B4014BD19762A8083FE1CB2D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556930, "uuid": "02da8206-476c-4bac-b088-fb87cfb5330e", "value": "196608:RfitDil5jmZBU8i37rK6JIgQGYhBu85X65nLUmbCZ9nqpXWyr:dwW5yZi8i3PVJIgQGYDJ5XGn2ZwpGyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731556930, "uuid": "29a0a7f6-1750-413c-aaf5-8507aaec3a61", "value": 8389347, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556930, "uuid": "e3f23b7a-b29e-404f-8368-7019346796d3", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41803d77-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload (CStealer)", "timestamp": 1731556944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556944, "uuid": "108ce89a-c36a-4625-9641-19db0fa73695", "comment": "Malware payload (CStealer)", "value": "8fb77810c61e160a657298815346996e", "object_relation": "md5", "Tag": [ { "name": "cstealer", "colour": "#21c3b8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556944, "uuid": "c80d5d1d-9b90-4669-bca6-89b0d325c402", "comment": "Malware payload (CStealer)", "value": "a0840c581f8f1d606fdc43bc98bd386755433bf1fb36647ecf2165eea433ff66", "object_relation": "sha256", "Tag": [ { "name": "cstealer", "colour": "#21c3b8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556944, "uuid": "5cb8eb9b-7a4a-4528-bd4c-6a984baa7c7a", "value": "T1CC776B0772E60195E8B7D2388AA75103D773B8634731CADF316D06152FBBAD0AA7B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556944, "uuid": "72d36ca6-67a9-4741-8c74-e1f70af3f10c", "value": "66b10d8b5718b0fd6fb4865843d44280", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556944, "uuid": "aa14a7e7-c582-43c8-9f82-85a3c7153378", "value": "393216:d76L6otUitqtH7wHtXq2pt2jbOCacCFIK0fpP9HF4VW8yfGnVQx4urYsANulL7Nv:d0LoCOn+2Gs4urYDNulLBiub", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731556944, "uuid": "5d951e56-294e-49e9-9dba-e4f697d1c5c6", "value": 34965741, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556944, "uuid": "63dceb68-47b5-408c-8ded-f4c3c80b84c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731557012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557012, "uuid": "07558087-2b19-4a73-9323-2e49ca368ab8", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557012, "uuid": "58136a65-af5d-48bc-8c98-d527e8ad448c", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557012, "uuid": "d8e0b935-65dc-4ce8-a97d-9cb8769dcbf8", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557012, "uuid": "014152de-21ff-4520-8750-fe490bb10c1f", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731557012, "uuid": "d622c5d9-fcd8-4373-aea6-b052befae142", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8beca940-a23e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731557499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557499, "uuid": "91e8f287-f849-4c02-a250-a2a8f02d2951", "comment": "Malware payload", "value": "96e915f880fcc356c444eaf311e06d20", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557499, "uuid": "1468b980-1229-44bd-a035-c509b0bcf93e", "comment": "Malware payload", "value": "f00c1c81fb531b772c437395bbd88ce0921542876311d1621bab72a93479642c", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557499, "uuid": "afaf8761-99c4-41ca-9811-4041a070d3e7", "value": "T15D34CEE89A569A3070241F42AC9586E3E513F6FF111ABB762334DCE0E05FC992837D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557499, "uuid": "63fc92ac-d03a-42d4-b649-7324eb47b9dd", "value": "6144:IQJZIjylxcdJdKcjTS+toNdy6xVQrHzQEeWu0:ITyUcITS4oX/VQrsEeWv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731557499, "uuid": "8c42142d-a16f-495c-9edd-ab4a74b91864", "value": 239693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557499, "uuid": "f9a563cd-deec-443e-bda8-13fa45f1dd93", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1415d4e-a23f-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731557964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557964, "uuid": "e3c020ba-3f11-435d-b54a-c8ca0dca8bf8", "comment": "Malware payload (Mirai)", "value": "6d19d8396c5512fbbc86fc36363946f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557964, "uuid": "4e6336c7-fe0d-429d-a38f-f7f46671f9b8", "comment": "Malware payload (Mirai)", "value": "412661a317a946a2aca23d7ac4ae9c0bdca63d843dbc5d126b79afb9c56426fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557964, "uuid": "489bc8d2-30c8-4cab-aaf6-a29445ecbc05", "value": "T16E41F0CA1F319EE9F05AD53847370B7937AE510846C04249E19CDA006EC030D899E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557964, "uuid": "a108bc8b-649a-4f12-8194-0496da731b9f", "value": "24:3+Ydb5jl8AmslI3t8AmypR/z2HdllP+EqtWB4u37I8paXDdz3N9l5zBkEp7iBAG9:OG5E4GYg2H78E1EXD/9LuEpgn3iRmBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731557964, "uuid": "f3a543a0-afcf-489d-a0a7-4c86a718fbdf", "value": 2000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557964, "uuid": "dd213bc3-81b0-414d-8239-3b26d32c871b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731557980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557980, "uuid": "8003b8ff-6f0c-4762-b65e-7b53ef16461c", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557980, "uuid": "3e393f6b-13fa-4148-9ea9-48a691e6f085", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557980, "uuid": "3a783444-76e9-4f67-9220-eeaf65eaeb7a", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557980, "uuid": "926d38be-f03d-441e-8e84-e11377f88470", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731557980, "uuid": "4366136a-1512-4dd7-a31d-0caaa794e6af", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37372d99-a242-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731559074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559074, "uuid": "6606e424-688e-491d-98d2-1b9d970c4f4f", "comment": "Malware payload (Mirai)", "value": "481cf74d282ea849b894c8d42bfa5a3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559074, "uuid": "1c176af9-52b2-4322-90d4-1e764bbfe2b9", "comment": "Malware payload (Mirai)", "value": "180632c85d78d71b08d1695d1e335077a987a8cccae000624a5103f83390aa37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559074, "uuid": "e3c59af1-ab6d-4b8e-850d-eb20286d4975", "value": "T18521C266A5D4EC73DB6611B66781AF4B2715CDE16496FF0F8D610802ED292D0D1323", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559074, "uuid": "3a3a725a-70d3-44ce-8132-57442165144c", "value": "24:FltMoJFHxgxCl6ZSiSZSLRmMF+fG/4w0rGuWpdruQ3yNfTy:ftxL5sSi0SLRmC+S4w0rSpBHCNG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731559074, "uuid": "2b63332f-6c7d-4901-826e-08217a4c3d0e", "value": 1180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559074, "uuid": "646891cb-461a-4c80-8bf4-b82d42df71db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbcb0c11-a242-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731559351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559351, "uuid": "2b7c43c8-02fb-4362-832a-b9622b790a6d", "comment": "Malware payload", "value": "e26f38dac883690f32e9aac783897126", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559351, "uuid": "d2ac69bc-faab-448b-a3a5-1db816c9b0bd", "comment": "Malware payload", "value": "ee1e5872b3361aacd9ce08ab07b403cd2dc378ad5e1f2b77a69dd97e1f3d898b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559351, "uuid": "450b6eb5-f0ba-46e4-9717-e7bcf126037e", "value": "T12834F06AECC88C8DE11802349EEC640ED02953DD569CB3CC67C142ECA2A7FFF54B56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559351, "uuid": "6c58d265-a1b8-492f-b5dd-94d0ede5f097", "value": "6144:BYupKH4IwpYOE01HvEXMqK88kMikJcB3FY3eMfXTi:BnKbwpYOE01Hko88k5hB1YOMfXO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731559351, "uuid": "d1b60d6c-ed58-4f9f-9901-6ece6d93be19", "value": 247901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559351, "uuid": "5c0235b6-2869-4242-94a8-52e60cac8859", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35c22642-a247-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731561220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561220, "uuid": "59efbfc4-826f-4777-81fc-9db9dc89cbc0", "comment": "Malware payload (Mirai)", "value": "50bfcd5178255355bf1c2e70e06d6f22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561220, "uuid": "0f20f3f2-bb41-4c6f-a451-30e383bd82ba", "comment": "Malware payload (Mirai)", "value": "c87c43ffbe1736452c78e856544d12e2c0a32872b733ad8bd7ffeee98c1e19a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731561220, "uuid": "b212cf33-ed48-4c91-89dd-7f71a21a3a1a", "value": "T15731FED1A3D05EB8CCE491BEEE5643507374AF40E0C772629608A768BE2AE7C9D360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731561220, "uuid": "d9ca6cb4-e4e3-43cf-96c2-91318012d18a", "value": "24:lpKGpa7Urz/jlf+F0AXK1hH9Vev3gRGaJ9iM3BBuDCWlxrR+zP6eF0:lpKGpa7UrLZ+FCI+JhBumWlxrsPLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731561220, "uuid": "882f6fa9-aa71-474d-b45d-8f48c4c44aac", "value": 1456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731561220, "uuid": "51705f56-4251-489a-acd1-bc5616bb51a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a924c467-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1731563131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563131, "uuid": "c1265afb-ec73-4171-8472-8f3f52aceb85", "comment": "Malware payload (Blackmoon)", "value": "0b3b2555f7215b6e93ed0d3e4fc5fcff", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563131, "uuid": "413dc9a2-35af-4c55-a2b4-7b6b413ab18f", "comment": "Malware payload (Blackmoon)", "value": "e62653bfb75ac76477236123b1bd2c7f5dd2ef4ad21d1c7ca8f517e434b091a1", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563131, "uuid": "304180cc-513e-4a09-a9e3-f9197de30691", "value": "T146E42337D3FCD7ADF4EE4D731292A89D1942BD12EC6306DB2B581036E948BC54E984", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563131, "uuid": "4ac03444-7584-4923-b023-fd6bded6fa26", "value": "51e2101e560f36b10a33f3ea6df5bbc7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563131, "uuid": "8f5e34c5-bd74-45af-a13f-41dc79f5d0f6", "value": "12288:EdBMVWEJus2SBR871BM8mcvHsldFcatXZZNEcPMvdV4UBuyyHgMDY9c7sOGIHQVk:MB0WZs220+8lvHslVtXZZNE6MvRmgF9v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731563131, "uuid": "05f78c59-0837-4da5-b142-b5c5c43b95c6", "value": 692224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563131, "uuid": "1e2a49a9-5f0e-44d5-a3cb-b2e95aee0aed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcae7f2f-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731563271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563271, "uuid": "b96b46a7-4745-4821-92e1-3065601a290f", "comment": "Malware payload (CredentialFlusher)", "value": "ad3b89526b234648cf8c8832a570a16d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563271, "uuid": "94c82314-7f8e-41fe-982b-52a903ad8604", "comment": "Malware payload (CredentialFlusher)", "value": "f96e2381234e0a3d4626c30543be6a02934a0cd0f9daec39eea0cf3f061c2c29", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563271, "uuid": "866a0fad-37a6-42c6-bc03-2b9952561d30", "value": "T1EF563350A1C4A480F27C1B3996F253C30B32B6D28F39C76F65A6AD1528F6740B73A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563271, "uuid": "01c56953-ca7d-4921-b18d-5715c8af8f84", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563271, "uuid": "9f756323-0996-40ec-b15a-832c2bb9f156", "value": "98304:V13jQKzL2Eb03VdFyrBvfZqafuib31M4Hi0biTFUI9d/w4NhHjRMq01g+XgjB:VRRL12VdArBvhq0uYFvHRKFUIP/701g/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731563271, "uuid": "c0b13ddc-be36-4de8-b1a5-53ff18a02335", "value": 5912064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563271, "uuid": "c4c6da74-de2d-4f62-a56c-780b7b5f411f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22bc49aa-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731563328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563328, "uuid": "69eca507-e0c4-47a2-a62c-4ceef16959d7", "comment": "Malware payload (Healer)", "value": "34e8c7240d1aa7a1f075fcf6bbce8e03", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563328, "uuid": "fbafca94-860b-4c50-830d-cc03e45cd852", "comment": "Malware payload (Healer)", "value": "1aef45a52466a2ff26708fe6ad234ec25c1f3b098a1c4785e9b91420257a0912", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563328, "uuid": "a16b1b21-8827-44f0-acc0-6a13b9ac0eb5", "value": "T1FFD53B92B58A71CFD48F13B89527CDC26D6D43B9872108C39C69B6BA7E63CC512F5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563328, "uuid": "703b8976-2fd3-4a3d-a417-09d4dc3d5d3f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563328, "uuid": "78c9acab-8ac9-4109-b9fb-76b18927aac6", "value": "49152:8xn9QZWcUvQXtWTv3HsQs/zdJwwFWqy2oGBjiyYtZV:8sZZUvQXtKv3Hl4dFFWqKGBjp4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731563328, "uuid": "1ba62951-e248-4902-867e-2864ae65bab3", "value": 2822144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563328, "uuid": "72f94ed9-ba7a-48ea-8a52-85af6e768343", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41f0fca2-a24c-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731563387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563387, "uuid": "876872b2-d3ef-45b4-9e10-407a8037f975", "comment": "Malware payload (LummaStealer)", "value": "8a2ec2ffdf8ab213de19cdb467352c6e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563387, "uuid": "f3ec1e37-6fb8-4487-8d9e-229d6d6db0de", "comment": "Malware payload (LummaStealer)", "value": "e201f8ddea2e43792f0cb4b4df74e6588cc4ed4ca3bba7432f2f0e9116ab9c9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563387, "uuid": "b829aa96-6fd1-41ef-b273-67fd5a2a98dc", "value": "T11EE529A2691761CFF88A2A74C767CD42BB5D02EBCB2107E3985C647E6D63CC016B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563387, "uuid": "370a7acb-85cc-4a64-b2f8-3dd946ff3122", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563387, "uuid": "54917006-6c8f-49d5-851b-922d2ef087e1", "value": "49152:+YNQdv2kY132q0ePfwFiaucyUj4/fXj0nVi3in1:+Y2dv2kY1IkfwFiolWj0o3i1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731563387, "uuid": "1f037d34-a22c-4a2b-8df9-40840206b092", "value": 3139584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563387, "uuid": "ce92cabe-e516-4362-ba6d-9324cc65360d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60c8657-a24c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731563690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563690, "uuid": "30f8eb09-e100-400e-b8f3-651bf90c65cd", "comment": "Malware payload (Amadey)", "value": "525a62fb9aaf54388648e0e6f513b88a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563690, "uuid": "97c785e2-534d-4b60-8ae5-a96b303c22e5", "comment": "Malware payload (Amadey)", "value": "ff5e651fdd9c0852e1ff03349ebcb37eb30038c67ee074629626ee9eb1e33719", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563690, "uuid": "f780e051-a442-4a29-97b4-151c9cf3f281", "value": "T152E54BA5B40876CFF48B26749467CD8B5A6E03FE1B250CC39C2DA8B97E63DC911B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563690, "uuid": "cb08ce61-592f-4a03-a97c-ccf7d73aef7a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563690, "uuid": "643b5826-9d3f-449c-8334-006228c49480", "value": "49152:V4rb3Q9a+7UZRaoo0BfTGgGBuBTMUATP:urb3QN7QRab0BioT6T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731563690, "uuid": "078a727e-d974-400d-9007-ef13e6be60db", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563690, "uuid": "d3142a2e-ab43-4d3e-ba41-b2b41e09f4a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f68da0f-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731563847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563847, "uuid": "30b8c992-84b1-4307-b058-d41458538fc5", "comment": "Malware payload", "value": "b226f0b625d3d5e7a4ea8475ddab0dfc", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563847, "uuid": "97c98d58-8973-4db3-b39a-b583ebc89fae", "comment": "Malware payload", "value": "f0a712b4468a2ba0bee0511df056f66d3f51d66eb8460c733f73b19336370686", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563847, "uuid": "f6e150af-c7d1-48dd-9256-1db476bb2466", "value": "773301D00762278C8265D9753CAD301E4524252F32EA2D102DABD18FF55B723ACB6EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563847, "uuid": "d40725d4-5283-4ad8-83a3-39ce57354f93", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQi:8D+CAXFYQChaAUk5ljnQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731563847, "uuid": "0a0552b7-bbd8-49f7-88a1-5c5d0c57b363", "value": 51100, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6f6a84a-a24d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731564067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564067, "uuid": "c00c7ecd-68b9-4ddc-ab28-d7ff60f5e9fd", "comment": "Malware payload", "value": "ae495df8b2c6f3bbe08b95b8dc47e0e8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564067, "uuid": "0d81d884-144c-4e15-a8c2-3509f4a33248", "comment": "Malware payload", "value": "820c8b7a65b620dd8f98564fb0fdc772deacfd17dacc8117a8f06868ce1d0ed3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564067, "uuid": "d55de196-ba49-46ad-b0f8-b914e378b8f8", "value": "T1E5019E80EC6054B773F3006E4CD4555223223433138EDC2C75BD9791EF56622BB19A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564067, "uuid": "09f724ea-7ef4-49ec-ac3d-6ae952f33036", "value": "12:HdFMGLzNXMFfBl1+flYxONHFJVXDRHqSvzWvq0RSfvyLXS2LbFYq:7SBalYIH5dHqSvKioSfaLLiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731564067, "uuid": "92a49ab6-de3d-4a56-84dd-48167d4fd1f4", "value": 712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564067, "uuid": "45258ef4-702e-4d79-b014-2ff4c56d94f3", "value": "text/x-script.python", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea455bba-a24d-11ef-afe5-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1731564099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564099, "uuid": "4e0e5218-16e2-44a5-b137-07033c68c5d4", "comment": "Malware payload (Blackmoon)", "value": "90a543cc2fd256f555db3e6bb244082f", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564099, "uuid": "9a262626-01d0-456d-9f10-e5665a4bce45", "comment": "Malware payload (Blackmoon)", "value": "1a83024e51c11ea70b39cad44675eed419e45abd753b6c4371d2f19c95c33422", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564099, "uuid": "7f4336f5-e6e2-47c1-9b8d-e996742db477", "value": "T180E4239EB2136BCFFB53C0BA0A1B928338EB462A37D1D7FB5A3D714152903B715462", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564099, "uuid": "0e64ce04-2f4d-4252-8032-609345b257be", "value": "3c06e82d82dae13ecf3234b7d4d4a883", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564099, "uuid": "71a599e4-5a02-4e0b-b3cb-30a0dbcd5504", "value": "12288:uxmYW0ZRiW9ovnB+4l7FgWdzcHXAo8A5oJzGm6O3NGEPhw2USB/uypTB3VY/q43g:SmCZRb4nsugWyHXB8rzaOPr/FlB3CqMd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731564099, "uuid": "751c11bb-bfc7-442a-bba6-f0ab9a17fbf1", "value": 658432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564099, "uuid": "2992fc31-ed57-4dd9-87a8-1cab8b909749", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40fe3a78-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731564245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564245, "uuid": "db244da2-4fe7-4f0d-9b0f-de3bd82ee400", "comment": "Malware payload", "value": "a301f8512ba15bbce434b7f2fbc19ded", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564245, "uuid": "d5f62750-a09c-40a5-ab20-0726aa78ccd8", "comment": "Malware payload", "value": "baa6209832bae068f06d58be11e4f36a32b5e8b0dc53549d7125ecdd92ef5772", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564245, "uuid": "437f8590-5ef2-4310-bef8-3ea8a04cdb2c", "value": "T13B72E1D81125EFD15BA213264CBD4C98785228D8CC0BE35BB4E0BD7CA920A362E54D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564245, "uuid": "843a807f-86e4-49e4-bdef-5cb793c42242", "value": "384:YkaD8rM0rSzHVLJX4vovV0qmtGcd+TwglvE3SgHBnnq:Yk3rM0oHNJXT9lQdXewnq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731564245, "uuid": "eb6cd8a1-670d-41bd-be14-8c89c5a64d2d", "value": 16640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564245, "uuid": "70450c92-806c-4131-8c7b-fe688324af94", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731564309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564309, "uuid": "2e5b0744-894f-4dc5-a4cd-25da16364a0e", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564309, "uuid": "b8090e6f-6155-4449-b3b0-47e7cab6867e", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564309, "uuid": "e131ac6b-5b48-4c98-9b38-97fcd276565f", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564309, "uuid": "86c794f6-2eb2-466e-a92b-96a0abe13578", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731564309, "uuid": "db998336-4c01-44b7-8bf8-38cbeed83baf", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1731564426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564426, "uuid": "5df886ff-d1d8-450a-ac39-968c2701dc36", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564426, "uuid": "51665f19-e320-46d8-99b1-e6321cd6ea66", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564426, "uuid": "863289a8-7310-4873-bbe4-6aac26062873", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564426, "uuid": "4e4bb8cf-20a0-44b5-82dc-97e2f5158dbf", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731564426, "uuid": "099b1db4-31b9-48a6-a714-a8241765c1c9", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564426, "uuid": "bdc73c4d-5d8a-4a17-98c9-f18eb36b4442", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a37cb741-a250-11ef-afe5-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1731565269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565269, "uuid": "db250548-5ed0-4107-a930-dc69d72c7f3b", "comment": "Malware payload (Adware.Generic)", "value": "f5d20b351d56605bbb51befee989fa6e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565269, "uuid": "ea3cc833-73c0-4544-b889-0d5b52a410cb", "comment": "Malware payload (Adware.Generic)", "value": "1fce2981e0d7d9c85adeea59a637d77555b466d6a6639999c6ae9b254c12dc6b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565269, "uuid": "3520ba73-9395-494b-bba7-ede40c5a4660", "value": "T1C7D533903EF595B9D490007088E87F96F2F9E1740E9600AB37A64E2E2F3CF54769E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565269, "uuid": "3d273aba-8d95-412d-b8b6-661f237fe408", "value": "e00de6e48b9b06aceb12a81e7bf494c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565269, "uuid": "991926ef-32d8-4f6d-b4ef-9a91637bb2e4", "value": "49152:oG5UfgTLfZ8yjQ2ggjrxNsz51khblF2OhuyFmLpEmwQE39fC2XhkhwzQejcz+:oG5QgTLxDcgjrzuDKbjuywExQElC2XhF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731565269, "uuid": "b7e3a5ba-e9c3-4d6d-8e53-030f8ee2d55a", "value": 2981296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565269, "uuid": "bb7fd7eb-305f-4ee4-b46a-44011b4c6c03", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9738be76-a251-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1731565678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565678, "uuid": "f207e5e7-d818-4397-8c0e-c523d0c502b7", "comment": "Malware payload (Gafgyt)", "value": "de1e33bfaa12017f3d3923828905c6ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565678, "uuid": "33337527-66a0-4be3-b94f-90294996a9a1", "comment": "Malware payload (Gafgyt)", "value": "f8a06927ebf501d7fbe94f1521e8d10ef904de2d79cb25ba1d06728d06a787c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565678, "uuid": "5a8b56af-ef8c-4f43-a029-a072f5e6a3a5", "value": "T153A3A30ABF600EB7E86FCD3745A85B0A248C651A21E43B767574D928FA5B10F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565678, "uuid": "ac4a3d24-a876-40e2-8fd2-aea5581a6c43", "value": "1536:UyRttE8GAJ02AqADFkpeof+j4c/+ZjBPVZqbTr53rnzsT4:Uy/ttGM02ArDFCsoPVG3rnd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731565678, "uuid": "47366d67-46d8-4183-966d-5e366dc0411c", "value": 105992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565678, "uuid": "64b920b2-2c07-445f-bcf1-1ab4bd19cbb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08f2e85e-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1731565869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565869, "uuid": "e1a29f40-e5e0-4cd1-9813-8e070352f40c", "comment": "Malware payload (Gafgyt)", "value": "b07d81bbb47956370de8113a4e7419c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565869, "uuid": "46ad3947-fe1d-4155-a0d5-f313d5d6c3ef", "comment": "Malware payload (Gafgyt)", "value": "6d1dc30bfa7b8841abaee1ea577186e85bdbce598ab316cf5760b9165ece7143", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565869, "uuid": "b4b1174f-74af-4a5b-a006-f9fbb12c05b9", "value": "T148636BA3CD142E58CA4CA474F530CBBE4F53955286162FD78066E27A9143ED8FC4EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565869, "uuid": "0263754f-c7ec-40ec-bb71-98c02959dee2", "value": "1536:8Uk05Fu6LX7MJXKQshUKmUno40wYF+07SXK/lC2OnzsT:8UPVLrJPUhUno7+02XK/lCn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731565869, "uuid": "d036c040-e746-4be3-b067-8b876d1bbc64", "value": 66856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565869, "uuid": "dea56e34-8190-404a-a62b-9c2d6217d23c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "370007d6-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731565946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565946, "uuid": "f93a9466-d8ae-4b43-a2ed-951f95982231", "comment": "Malware payload (Mirai)", "value": "d1d0b40462b9175aa76a53f27590478a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565946, "uuid": "e8ba6d3c-38fc-4c42-8ccb-c0f2dac5e51a", "comment": "Malware payload (Mirai)", "value": "a9ca4e24fc7b1844222d6ba83979b299edb5aed597c8ea7ea5374784dc5bcb76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565946, "uuid": "16e93d8c-72dc-4d54-874d-9c1ee1538682", "value": "T120A3E54AF8819B1AD5D816BEFE4F818D332367A8E3EF7203CD146B1437CA55B0A6B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565946, "uuid": "33471e27-30b7-44d1-9aa6-510196218fe9", "value": "3072:IYEmXksZXtAfRjO9Kn+pY6GfzycoWDC84w5OkM0n:JbXksZXt+4e6udoWDC84oO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731565946, "uuid": "b6a8a83b-34fe-4229-aaf4-035bd7979e0f", "value": 100024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565946, "uuid": "5759d7cd-7a8f-4acd-991a-22e3c6d33e72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f41eef6-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731565987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565987, "uuid": "75681431-50e1-4baa-aae8-434d2409c70d", "comment": "Malware payload (Mirai)", "value": "66ec960bd6331c72e1a517967249d568", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565987, "uuid": "c279ae55-3b03-430d-9678-1dd243eddf98", "comment": "Malware payload (Mirai)", "value": "6acbd22ce2759435250e8b07cc64becaf03262276e240b1588aee25f92034459", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565987, "uuid": "b049c4fe-351f-4cc8-9720-11d159fba0b4", "value": "T1EC732B42731C4A07C5671EB02D3B17D1D7AB9E8123A0B3866A0FBB4981B1E33954AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565987, "uuid": "1ae3c7e5-d442-41a6-881b-79e9d1e0278a", "value": "1536:oZOxZ9w9xDRJ819mscVqSIIEIGtSnzsTvr:GOxZ9UZ89EEIESn0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731565987, "uuid": "27d586ba-0b28-4bae-91d6-15a1c589c70a", "value": 75148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565987, "uuid": "52841efd-21ee-4206-bd37-0a847cc26a0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731566138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566138, "uuid": "bd851432-665c-4fd6-a51f-bd685644b4a2", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566138, "uuid": "c10d9076-537a-499a-81dd-fa359b8a9329", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566138, "uuid": "11027422-75e5-4fab-8603-3f05a7cefd32", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566138, "uuid": "c455755d-80c7-41ef-9c84-0c117941b0a6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566138, "uuid": "4908ac20-20f3-4647-aebc-70ccbf4fd286", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fa0943c-a253-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731566417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566417, "uuid": "c78e5384-e029-4036-95eb-18d93ed2ca1f", "comment": "Malware payload (Mirai)", "value": "c45a604550f1d56583d675b8d483ed8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566417, "uuid": "2438ce46-48d4-4785-b1da-c20fcc024da5", "comment": "Malware payload (Mirai)", "value": "2f49a8aa2243588afc772d5de4c5594e115d0c1c3ec1c85a8a10338ab3378618", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566417, "uuid": "f1959933-b639-4793-95fc-fb6f466b2532", "value": "T10C7339C67900DC7DFC4BD63682074E18F631B315AF822E23B762F9B36961094AD6AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566417, "uuid": "7c7d13ad-9180-4a3f-b26a-87e4e3cd8658", "value": "1536:fvTHA4+Bbdm66zGbn+N7k8QrtUpENNnocbrm8ekBzl:3jA4kdm66WnWOyinjbN/l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566417, "uuid": "56f24a82-b8d7-4e15-bda7-ba23ca32835f", "value": 73904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566417, "uuid": "38fc2df4-4dbe-48d0-abd4-b5d38240fe22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4d7d18a-a253-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731566640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566640, "uuid": "641ea1b7-6110-4445-884f-ccc90d35b5b0", "comment": "Malware payload (Healer)", "value": "16f564fb9d0469e8d627302877e5c1f9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566640, "uuid": "a60db0ec-33b0-4c27-8533-129065c5726d", "comment": "Malware payload (Healer)", "value": "d8cd4c3d9360be697992d674413f2d6972771d1afedc6bb59123ddda1810a346", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566640, "uuid": "2d7c8a32-506b-48da-93bd-c9c8b331714c", "value": "T1F1D53BA2B505B1CBD48E1778853BCD42A96D47BA47240AC7DC6DA4BE7F63CC111FAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566640, "uuid": "2b191596-0e18-4786-9d27-374cfea9aad6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566640, "uuid": "a8afa20d-3e9f-470c-b976-99d6a16e4c8f", "value": "49152:mNb0Ue0FOuakv7ihASa5o+KaJX3Ce77UUBb+rfnGveCE:Q4Ue0Fbakv7imSaNXyQAamKeCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566640, "uuid": "475b3911-1eb6-4a6f-8837-1b7ee0646dbc", "value": 2856448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566640, "uuid": "04d6e22a-c460-499f-80f6-407eb7353e4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66efccf6-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731566885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566885, "uuid": "a77d266e-1c80-48fb-92f3-5f24843340df", "comment": "Malware payload", "value": "d74bed7757ac453aed2f80d91b524b44", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566885, "uuid": "0183c7de-4bce-457f-99e4-17f6e48c3dbb", "comment": "Malware payload", "value": "e2dab416d35cd85e2efd7ae8a3939d111d61fe085b82883cabb0b6a9724ff158", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566885, "uuid": "f22ba4e4-6ace-486d-90a2-a5624d3bf62d", "value": "T1B7D312B90276AFE2359B4526481BBD8C7A1D2FBE2788C56377048F4EE13BF6C04D06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566885, "uuid": "90b9aca6-8af9-4a54-a6d9-131d1d741ff8", "value": "3072:ZtMV69jRef2p9AQ6eL5XtP27lhcixsyl7+C:gVORefQA+XtP2hhcxG7+C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566885, "uuid": "353fc52f-489d-4ff0-9b05-3f62a69b1fd5", "value": 133696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566885, "uuid": "969f5aff-b714-4c60-b519-3e1b131b766f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671d5cab-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731566886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566886, "uuid": "06428383-80bb-4511-ac0a-02ed75ae1d19", "comment": "Malware payload", "value": "94a8d8d08c5df03d7475e1863459bf5b", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566886, "uuid": "70e6aafc-1ede-4229-853e-58b289b17ed8", "comment": "Malware payload", "value": "8d877f0604a44631844c39648ea03cfdd9665e285d063bb9988f4afb328b48a0", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566886, "uuid": "38fb6aad-8841-4cb7-a17d-f8734ee92fe0", "value": "T1E7D312A5B61E40401ED85295F30D317F27CF7F1BB7AE02F0499ABAB150B9165CA4CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566886, "uuid": "414f74cb-6193-4111-b2c2-ffb39d657237", "value": "3072:E1ZcYpPQX2PGRGVIoZIemphPraapmVQkIH6k+vKvKnnY:ELVVIoZIe8raaHkcR+vKiY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566886, "uuid": "4665b415-5159-4d5d-b73b-6ef8fd86d7f4", "value": 133696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566886, "uuid": "e6a00390-271e-4499-aa2e-1ed139daa0c4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "675fd76b-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731566886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566886, "uuid": "1ee53bb3-f286-4f5a-b390-a5a3fac160bb", "comment": "Malware payload", "value": "e1a298464a7a9a0761d930bce5500e61", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566886, "uuid": "76fb0cd3-1e9d-477c-ac8f-304e0f1a4b11", "comment": "Malware payload", "value": "8884666f96b586832380a18679742709924b6856093c223d1c9c3116ba1dbd96", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566886, "uuid": "7706c032-0ae3-46e7-a8af-585a4ed51b5c", "value": "T1FC9423C7A25CA0EB01D994D0D1C2818D36E0EEB9EB5FF8137ED309ABD9348C745D19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566886, "uuid": "a2a1aea7-450e-4888-bddc-0d3bae755f35", "value": "12288:aSZ5jX8Kg8Y+dtnSSz6Z20KwGlP2tIsw8sEtZ0:aSnMKgSpM2flP2qsw8sC+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566886, "uuid": "65d4a64c-2781-4bb4-9d97-6e48a1c49d1e", "value": 421952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566886, "uuid": "9c575db9-6849-4589-a967-25eac2714440", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f4fe999-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731566980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566980, "uuid": "3da2b973-b9e1-4aa8-8c73-5d80866aedc9", "comment": "Malware payload", "value": "6788be3b050e880dcbd37c47c73d3fc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566980, "uuid": "e797d2da-74ad-4309-a22c-64d7d34d6574", "comment": "Malware payload", "value": "20c6f5cafe35bba43f3d5f9a5b8ad009776f048827a9aeac981f57161bcbe1e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566980, "uuid": "6c6c623a-27bc-404b-9e4b-37f5f2140305", "value": "T13A833A32BA355E1BC8C8A53E61B74765F1F5274B20E8C61F7E322E8EBB60540271B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566980, "uuid": "59b3fdaa-ddbf-4ccb-9110-3b156820c477", "value": "1536:TNwvbHiIlicDakCFvsAANhjTOVPQfzP4fP/jSWmiFo4KnfE5iP0QUxSr4HFsDS:TQZgMGP/jS6MnM4CcUHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731566980, "uuid": "891c2f98-e854-4a88-8e03-e0de7c826d06", "value": 83256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566980, "uuid": "5015b2d3-7aad-4822-9423-212458111cc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52a2b04-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731567097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567097, "uuid": "5bccf153-0521-441d-a16b-f1ba1c13964c", "comment": "Malware payload (Mirai)", "value": "1f98b353b07c9575b200c2373bde4678", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567097, "uuid": "a3d202fd-78ed-4787-9433-052b5fe7fc96", "comment": "Malware payload (Mirai)", "value": "cda270856bb316a3eac1d8738a4e88c371facbb62afe5f5560fbaaa13a0b40e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567097, "uuid": "1a98a0cf-237b-473b-beb0-d2317dbf19f3", "value": "T141B3AE87B38FA422C4670AF80BDB8FCD296321528F1BCDE36D1DA879247D1C7591A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567097, "uuid": "c62bde6d-ecfb-416e-a4ed-e56b8f169611", "value": "1536:2x0yG6iy2UJBnV7+bSrvKn4mUGWI+nJzSDH7RgLTknjsTd/LW2:2xKSNN7+Orvy4jGWIaGDH7RgLTknkq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731567097, "uuid": "0f955128-ff9c-4e2b-bd82-63a2a5da6a40", "value": 116296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567097, "uuid": "fec14a11-ffec-4bab-b272-9d25021b0fa8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d5ae1ac-a255-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731567245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567245, "uuid": "7ac9e457-b3f5-4bae-9069-ea07a7f75f50", "comment": "Malware payload", "value": "c559e07e30c758d768a516077d0fc366", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567245, "uuid": "9daea20d-b6e8-45cd-a587-89f6633c58a7", "comment": "Malware payload", "value": "62440e861fd810ffa35881f3049830d6520117167a2cd89cc4c2747ff216240a", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567245, "uuid": "f2700b4e-25b8-4133-aae0-6b9ba8531d14", "value": "T1DE24ACE694E557F1CC05BB82FFE237A9631B58C1436E4A122D2FC688DBE1C1177903", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567245, "uuid": "b2ef95ca-d55d-4d90-b61a-37366f9a30f4", "value": "6144:OhAYEMfREusLnHWOxgD5PnuqHjjLUaBx0u:CREMeT251PxAyx0u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731567245, "uuid": "ec1c879c-fde3-4503-b1d6-98f81494016a", "value": 223306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567245, "uuid": "bbbcc1aa-a030-4b4e-81eb-a011c5dc7ec9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2796a82-a255-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731567469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567469, "uuid": "44cba2b4-2407-4a5d-8e65-ce9ed5614724", "comment": "Malware payload", "value": "d64f45ddf169c7871d3dc9193e65376b", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567469, "uuid": "da6e98fb-85d6-41e7-bdcf-dacf0fab3441", "comment": "Malware payload", "value": "73157c13515225913f6061a08b175447fab4b8d9fb2e0f7d6f70c327bf27973b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567469, "uuid": "2a189f50-6c43-4f52-a2f6-d7c584196d8d", "value": "T1D034E0F2493C62E301CEAFA91F3FE1381992711161929AAAF97474EF52DDECCC6453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567469, "uuid": "850f56fa-80a6-4cd6-99e5-465aea72be04", "value": "6144:Hrvg1nHT/H5jzsuoSPoSUL4v8eIPIGr12emURu8om:HTInHT/H5jU08emZrE2u3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731567469, "uuid": "25f4fd5a-0eb3-470d-9802-bf346e7c7e65", "value": 247877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567469, "uuid": "ed872cfc-3f0c-4ca0-b03f-fecf08d5929b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccf58aab-a255-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731567486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "30ce4886-32a1-4e11-aecf-474649e9c8a0", "comment": "Malware payload", "value": "9f478dfa5c23c0a6a85639a25d02a9b1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "3a185d43-0b86-408d-9966-6aadd2ae7521", "comment": "Malware payload", "value": "348a54aed95b2fa50f8f172d19ae44ddde177b661cf5627a4c4b8952da47d082", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "dc9ae589-bf8e-437f-a1b7-8a237bf30eea", "value": "T1FCD5298B62B3B54BF662BCAD4205AB42454B1C7A1E11B1F5EF35872062FF9E384673", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "452a6c1f-a2b2-448e-a770-8cc42bc92e85", "value": "f8991fd0b0971d8f40cf74427bb9e57e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "5edc8596-834e-46c8-b2ae-02db908d8489", "value": "49152:rt0WJo6iw2+BCBhyGDz7cep+/Cz3ddQn0xIpxg2Wv9SJu3kSws7gtSws7g5:OQi2E9KidQn0xIpxg2Wv9ES0SU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731567486, "uuid": "8b465a65-d954-43d6-b7d8-c9ae76b1f39d", "value": 2855040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "20ca8bea-4c97-4230-925b-3bde5ebc8ee2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd1b32f8-a255-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731567486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "8d5b6e5a-75dc-4ab9-9c11-b1ac7ccb5625", "comment": "Malware payload", "value": "808dc8c92a9ce358067ab25d18d2a76c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "46135606-d28b-4583-bcb6-73f5ae10869a", "comment": "Malware payload", "value": "efaf374741b83845c8ab35629e9db0b4ac437a626aed266bd26621cbf31b6af9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "c63375bf-e794-4b46-8166-ce65a02a4859", "value": "T1A9D5398B62B3B54BE662BCAD4205AB42414B1C7E1E11B1F5EF35872462FF9E384673", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "427c400a-2982-49ba-8b3d-1c83abf6c701", "value": "f8991fd0b0971d8f40cf74427bb9e57e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "bae038fd-b6b0-4e90-886c-d6674098e529", "value": "49152:rt0WJo6iw2+BCBhyGDz7cep+/Cz3ddQn0xIpxg2Wv9SJu3z4Btn7QfY4Btn7Qfr:OQi2E9KidQn0xIpxg2Wv9TYtnkwYtnkz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731567486, "uuid": "0b563eeb-7335-450c-bb85-ec83470477cf", "value": 2884736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567486, "uuid": "af58c61f-43c0-4fac-a2db-9ac273ac9862", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4af2d97f-a257-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731568127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568127, "uuid": "a6ba11e8-4249-4bb0-a1c5-7daa0d02b3bf", "comment": "Malware payload", "value": "f34b99ab591ee83c67004295172e4b4d", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568127, "uuid": "e1a8fa04-d8aa-43a9-bd8e-bfd7cb658605", "comment": "Malware payload", "value": "67d5a2b899b13bad507cd3ad5607479a82f2f6307d01bc893055c8b37490e15b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568127, "uuid": "f28e490b-a8f2-47da-91bf-9ccc15d2f6a6", "value": "T1BA24E01C886C7169D26D726DC398C82E9F205975C8FCC0D86582A2DEEAC17EFD890C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568127, "uuid": "ff20f462-5945-4c24-8a01-02792be974a1", "value": "3072:uGqzip6tnEeHZEjEVXnE1gN6vWChBtLBigGUxV3UuKBvRTFfqmaW6TKRbohkdnHW:uGMZEwnqwChBtLBBxVZqvCmJR6kEOTP2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731568127, "uuid": "c7e1964e-c288-48cc-a471-0c5ef0b171bb", "value": 223316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568127, "uuid": "463f3efe-ccc7-494e-b76a-69a7f9c45584", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0e52d5-a259-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731568932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568932, "uuid": "2b9aff67-8063-47e6-85d2-8b06022757ca", "comment": "Malware payload", "value": "42b679d6448833c3a1c591d0f73e2ef0", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568932, "uuid": "c880bdbb-4925-4b2f-a8ae-14de1ce5b20a", "comment": "Malware payload", "value": "9ab378841f40e6da978cfc7dcc03eec62b93881c823afceff034ded5357e2209", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568932, "uuid": "fe247669-032c-425d-9c4b-1e6179e9bc84", "value": "T1F434CF087EC296279B998D1DC4E35DB813EA6A9051DA03C070B2BE8F15E757D2FC36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568932, "uuid": "368ed269-73d3-46a2-bbfc-4d791157d1cd", "value": "6144:BM6fnheqJj+grDPnrJfIHf1z7slpJgj/2kZIqwJL:j56gfnrmzwl/girJL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731568932, "uuid": "eced98c8-dd2e-4c4e-be76-e2676c8b7d2b", "value": 239678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568932, "uuid": "639a3f79-8a45-419c-9c38-fd9f59e8a82b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72750bca-a259-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1731569052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569052, "uuid": "6ccc6934-c6d1-421d-91f7-aec3c2fc379f", "comment": "Malware payload (Gafgyt)", "value": "8cb204af29ef1dfe4a994e1945181170", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569052, "uuid": "3af7772f-c474-45b2-821c-45433be68f7c", "comment": "Malware payload (Gafgyt)", "value": "32942318887704d4c686cbf12adcd444f1f4c9808ee5c7c1e38a6685d19e0691", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569052, "uuid": "adb7680e-771e-4220-858a-8c0b8ebb0a85", "value": "T193A3B60E2E558F7DF36DC73487B78E26975873C62AE0C585D26CE9005E6024EA41FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569052, "uuid": "43190541-8763-49ba-bc2c-514876694dc4", "value": "1536:tX52vz5pLNhZy/PGbqSx9Df3Nf6e6ck55LxsLfPY9A/hTft2nzsT9yj:tgo/PGGEDfc0k5s09shTV2n4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731569052, "uuid": "0e608327-f7de-47c0-bda7-7f1c868023ae", "value": 103556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569052, "uuid": "027273f9-de0d-4e12-8dff-9140aff8f388", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e2dd30d-a25a-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731569367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569367, "uuid": "53149e4e-a16e-4301-b256-7170c7f9e38e", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "70056011ee962372d234c6c451f34602", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569367, "uuid": "fc8f023b-33c5-4fbe-98f0-e6f6fd337d57", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "cd319911244220bcad96c0ebb251ed7361fc007e6a9e0c55103243bb0c736eac", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569367, "uuid": "53db890d-a720-4373-8a03-42e376f68836", "value": "T10DE4CF2252F13930F6B74B328E3ED2B86A2FF5718E2B665D9118965F04732F1C5E27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569367, "uuid": "8a0390d2-a220-4ee1-b33f-0c0f84b27e9b", "value": "581d8a6011568e822d219635f1514690", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569367, "uuid": "d99ee867-7143-400b-b59a-58e62e22d0b4", "value": "12288:pOz0VW0p1oXPnwTGLcMcis5U0apv03XOYzO:nVW0p1oXPnwicMUMdmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731569367, "uuid": "033f9df3-9511-496d-baf9-b3e9e00c7ff5", "value": 664576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569367, "uuid": "322c0fd4-ef9a-4902-9462-e29f145951c8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a517205-a25e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731571025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571025, "uuid": "93ce95f3-9ca3-4243-82ba-5df0ded82208", "comment": "Malware payload", "value": "16bda72ffbf311c255406681fe049815", "object_relation": "md5", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571025, "uuid": "3fe726eb-6ebf-45cb-9c66-7447398bfe7d", "comment": "Malware payload", "value": "853cbce29deac3d140eb1fa76f527da52538a3384e4cb4f77e987e795b807beb", "object_relation": "sha256", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571025, "uuid": "a29c72b4-e4b7-41c7-a236-4a4eb3fee89a", "value": "T1E2041310D900485EC32CE3BED342E75058CA6B6BAB54561B504B20F24DFE6DA6E9CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571025, "uuid": "5e116553-f84a-49e1-98d0-5c53b165ffbb", "value": "3072:hme5INobUn4jWHXyzB/xllN8oj4o1EaprYLLsfvmTTG1l3wKG7LhWaz2DuPcRnC:hgNz4jWHiF/xiojN1N/3mPglxKLX2DuB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731571025, "uuid": "59225425-4db4-43dd-a1f1-eb80b8426b91", "value": 188669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571025, "uuid": "dbf73ead-09f9-4c42-a99f-d1f8bca7354a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0af88eb6-a25e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731571026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571026, "uuid": "cfd28638-b234-4444-bd3e-d0db57a0ee4d", "comment": "Malware payload", "value": "ace58290020f7c199475780b50c5aea5", "object_relation": "md5", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571026, "uuid": "68d4285e-0034-49fe-9e39-a72ba0d1ee2a", "comment": "Malware payload", "value": "727c9ea7907f57dac3e4267f7d67aed7a1554c1bc0409124c1eb7790f5a7b4c5", "object_relation": "sha256", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571026, "uuid": "77c464e9-5425-40d5-ad95-fb91494ce5be", "value": "T1925423346A5B1C55EA9D7BF386C8BDFADEC45194B3D0333F64B82915BB48EB320056", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571026, "uuid": "14b9c952-325a-4ff3-bbe1-e6b0d75041c7", "value": "6144:zXKxA4d/3x3/SW0IdvfY74jKXK773C2UTLsy0dMn7HBu+uscF1:7U3x3/V0I1Y74XP3CFTAy0dMn7hzusS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731571026, "uuid": "526925fb-9843-4a19-8b5c-10769c110d1f", "value": 295445, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571026, "uuid": "0f15bdfc-3bcd-4a4e-84bf-0ba3c844ca98", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f3bc2d3-a25e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731571087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571087, "uuid": "35d4bffc-de6e-4ce5-a1d3-90f9415a1fa8", "comment": "Malware payload", "value": "b6d579f8e5f513fdf47af21408288631", "object_relation": "md5", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571087, "uuid": "f05bcaf5-4e35-4b77-a0e0-37e4028bab95", "comment": "Malware payload", "value": "6c6a28c0f274e6d8556cfd54fe9bbe87ee5ca8a279803daf06350279a3d1dca3", "object_relation": "sha256", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571087, "uuid": "0a773ea2-af10-4e19-a7e6-cb9231883feb", "value": "T10921F3136935C40B6C1606B7D3712D0B26C245281C1A5330B2ECD55C8782DF4E9D7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571087, "uuid": "5637be55-f04c-4374-8e73-73fd873536ed", "value": "24:o9+eEJ6vvVGxjbCfjf47YKVUdQ9DxHf7n9fwkACY:t03sULftH259b9wkA3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731571087, "uuid": "92b23af3-b53a-4260-89b0-7dff04c322a8", "value": 1144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571087, "uuid": "6a8bbad7-07a3-4396-9566-9de1539ed712", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b2d8bb3-a25f-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731571537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571537, "uuid": "eeba98d8-5fd9-4952-9886-c438c53574c3", "comment": "Malware payload (CredentialFlusher)", "value": "68712bbdca31150af39f43aeea6c2a73", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571537, "uuid": "ffc2b391-e39f-49d4-8a60-d15dd20320fa", "comment": "Malware payload (CredentialFlusher)", "value": "39e92574d6b238cc6736a2782dd2c360ad69396a8db21c077ed07236f3d72d9c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571537, "uuid": "e9ddb5c3-cb61-4ce0-8510-3357be4a9618", "value": "T18C159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571537, "uuid": "042c6f37-7f13-470f-82b8-6581a15bf963", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571537, "uuid": "40b06023-4eca-4071-a0c5-64bde9c46d71", "value": "12288:aqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTq:aqDEvCTbMWu7rQYlBQcBiT6rprG8avq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731571537, "uuid": "8ab0b4c1-5742-4622-b1c9-85afbe1b0c79", "value": 919552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571537, "uuid": "dedcbd96-f9c2-4078-b9b5-021f3a60ae9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d6bc6a0-a25f-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731571594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571594, "uuid": "55cd29ec-e8b4-478b-9737-cbdfc2204cd6", "comment": "Malware payload (Mirai)", "value": "8212dd5e396935db46ae6f21299a0d9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571594, "uuid": "a7155bfe-ae89-4e9a-bb44-74e1bdc22750", "comment": "Malware payload (Mirai)", "value": "9a48652f0afe3252fa8998bbb80e08269e62866e2d3ad98cc77180b9ef3ac7ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571594, "uuid": "0833c091-2ba7-4fd6-bc60-5b3ed99e90a2", "value": "T19B83E84AF981CA16D5D806BEFE0E91CE332367A8D3DF7213DD246B143B8A55B0A7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571594, "uuid": "343c4690-b00e-4c7c-b647-7b07d2ad3110", "value": "1536:2Pn4Ye94U9acvAXxtv3gPtRf+S5DEpDYdm7u0GbAOkGg7MKiU4RJ3ndvnzsTu2:tYeza2AXxtv3/S9EpDYUkbg4RJ3ndvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731571594, "uuid": "95100f34-1396-4000-b42e-af07c5c5b016", "value": 87620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571594, "uuid": "7b2f460a-55e2-410a-8bd8-701c96b985a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8392da4c-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731572517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572517, "uuid": "d74e402f-8fb9-4c0c-9ea9-fed312457030", "comment": "Malware payload", "value": "c3d40db87e2d003757ab2b77e7554d19", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "open-dir", "colour": "#d9b789", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572517, "uuid": "ea0c1958-30a8-4104-9d6d-8f33db31b2c8", "comment": "Malware payload", "value": "9a5d6c1f159845e29cb079b20fab7fbc05246924b76dfb9fb482e049ea85d35f", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "open-dir", "colour": "#d9b789", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572517, "uuid": "fdaec820-9f8c-4f12-a4ab-e6f31d56d52c", "value": "T18D463B17EC9545A9C4EAA331C9B29253BA717C444B3227D32BA0F7392F77BD0AA753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572517, "uuid": "ba31cede-a383-42ab-9af1-f4304bf122dc", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572517, "uuid": "1a842942-60af-48a4-8b7c-1d37fe29dfcf", "value": "49152:VF/qwTpHjneR5msOYHCXUdaKYCrohEDmgjg5E08Y6YCtKgISRJbn7:TSEdjw5ZgKY3OUE0Yt0Sbbn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731572517, "uuid": "34504b80-d281-4cf8-b658-0398247fd7db", "value": 5374976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572517, "uuid": "87fac60e-ada5-42e3-a531-12868ddb6c41", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac67e9ae-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731572585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572585, "uuid": "24cc19b5-6183-4ad7-866d-3fd4c43a810f", "comment": "Malware payload", "value": "0b1d0394544997e3a932199f5791ce57", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572585, "uuid": "4fc780cb-3e2f-40d4-84ec-441993a2a6f4", "comment": "Malware payload", "value": "ecd4c5dc6a9c328e388a00b873c0e2759c11c17b9f2356bb54c623187c4bb857", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572585, "uuid": "80aa9c2a-ffbf-4959-a091-da9f6c9c297b", "value": "T1ADD02E222E84E3301ACAC1564D78D040A23015F1004BACB9AADCB2A84BC03F89F33D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572585, "uuid": "5d66f9bb-f321-4abc-ac42-19740599e183", "value": "6:gwkw1S1gNQLh8JbtzBmV5GxFzLgyKBM3S15Lggi01K4vn:gG1LEGnzMixLgyaIS15LQ0Lvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731572585, "uuid": "3ddb8550-3b13-4281-b359-7842eca158f4", "value": 273, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572585, "uuid": "b1b0d650-245f-489e-9d05-aad69f20d540", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac8ae8b1-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731572586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572586, "uuid": "57855772-f24d-45d9-aebc-7097abc49ece", "comment": "Malware payload", "value": "719bd119c819ed6b689bfbc8744c2617", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572586, "uuid": "c2bf77de-908f-4343-bc2a-f989bb99f304", "comment": "Malware payload", "value": "48eb77418fc7a41081f98ba6a78761fdbdcd89a3a01fc82ef5681bef45bf7144", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572586, "uuid": "0b74f679-eeca-44b9-9b59-ba1d9002ee0b", "value": "T165846CD16794C43ECBAA12B2C876FF215D3E6FF81B20C1C75AA0769C5C766DA5834B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572586, "uuid": "ccd2e114-9308-4273-8d1e-d68c0d58b216", "value": "3072:NspAtO9mXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8E7CgLbSWw:vtO9iRQYpgjpjew5DHyGxcqo8SCp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731572586, "uuid": "c2a9e4f7-46bb-462f-814e-d79b184a0f6f", "value": 376832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572586, "uuid": "79d8c14c-36c5-4632-b18d-01cd77d17a37", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daea6e17-a263-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731573523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573523, "uuid": "814fcb39-13a2-498d-a8f9-76911cbc6631", "comment": "Malware payload", "value": "82c85446a323e39070006ea675b940b3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573523, "uuid": "ce54eb61-4264-406d-a47e-ddf824928f2c", "comment": "Malware payload", "value": "b3ea9c39c14374f572ae91a321b95e209341e3fbed9d132cdbf25f2e4b9e547e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573523, "uuid": "a18d8b8f-51d7-4958-bca3-d684b7e5bb3d", "value": "T141D57D23F182C471D11116B120B62339AA786FB52936CA83FBD8FD766D721A3D7362", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573523, "uuid": "605a6efa-ae4a-41ec-b164-2e2f4bd0f251", "value": "5aad076aff6a3bd2c917579560b6b074", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573523, "uuid": "ce662442-46f2-45f8-a4c2-652c7d80ab1f", "value": "24576:+CQacW5PtMP7iOZaeYrilk/1nfpRUBUmsYz40y8mXCNk7VDa4Ag+zMyvsK6dge69:+2PDilW/8mpVDtAmnmw7fspd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731573523, "uuid": "eb2b0606-437c-46fe-a652-e6b12c32bb75", "value": 2971648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573523, "uuid": "c561b485-a5ee-40a4-8d90-7b45e4a46d80", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44be5f03-a264-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731573700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573700, "uuid": "f41936e1-4d0b-4788-9022-a4a1662c5b2c", "comment": "Malware payload (Mirai)", "value": "3f4e8c50983df02d46c20482edf60177", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573700, "uuid": "88b3464e-29d0-4aea-a52b-d91362e32213", "comment": "Malware payload (Mirai)", "value": "7b70ef79130f83ab18f66e72430239d1e6c5f21aeff8274231a90f1b9781c809", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573700, "uuid": "c49079d2-b9ba-45b9-b967-e4b409975ac1", "value": "T12973F999B992DE17C6D852BBFE0F82CD372163A8E3DE3203DD14AF55368A45B0D2B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573700, "uuid": "c50e71a8-abcd-4879-bd12-e95cbc315966", "value": "1536:rwRGfSOPiSlO8fBU9/aG6y/8+UnrQZmwHrLq8J20nzsT:roOPiSdU9/aG6y/5UnrQ1Lq8U0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731573700, "uuid": "f6bb3aee-2882-4aa9-91bb-910fe2778cd6", "value": 75864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573700, "uuid": "7394ae94-075d-4537-ab9e-1372403bebdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1dcba81-a265-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731574286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574286, "uuid": "a4e23448-5b42-4dfa-a332-4edec515325f", "comment": "Malware payload (Mirai)", "value": "86051ed9f16a14e387d8f1ca49929b8b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574286, "uuid": "7f65bdb4-1be7-4777-ba3c-a2b44ab6e12a", "comment": "Malware payload (Mirai)", "value": "a282594c2838e6676dae420eb09052b30f7a3366bf0dc98af3ff11d87c247c16", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574286, "uuid": "9be6ac93-7936-421d-80ec-847eb55ce353", "value": "T197F33907B5C188FDC4C6C1740BAEA53ADD72F4AD1239B25B27C4AB262E4DF605B2DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574286, "uuid": "5f83e5f7-c4b3-4921-acc8-2bcb077cb9b0", "value": "3072:tQymKVauA93NInXoluIvOQz14injyUOrCeWwoWpps+PMsexs:myXVauA93NIn4lu0MWVWr+xs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731574286, "uuid": "6fc2ac3f-df41-4a84-903b-7e09e51dd82e", "value": 167832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574286, "uuid": "ee586a8f-1db3-4dd2-ab95-0229b8a32fcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df97f1df-a265-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731574389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574389, "uuid": "a2360b55-2e59-4ba1-9378-cd6ab161d88d", "comment": "Malware payload", "value": "9786b8d3c51b95c2a4c42c4a72132c92", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574389, "uuid": "9bb6529c-c1ca-4e72-b115-d4bec21502c7", "comment": "Malware payload", "value": "47b674a10b858e4d6708fc613030c3d98e4ff7fc3c25dfefb38366bb2ffeca30", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574389, "uuid": "39afd1b7-290c-40af-8a13-114dd3fb11b2", "value": "T1AE11558884663D68B0B1CCCDE2A38C06BE04D17E5D591A407F4D847B8BBE6047054B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574389, "uuid": "25d80ab5-fa68-4533-b79c-baaa32a68ea5", "value": "12:7XOTtvmZPuXOpqXYcGFyZow4+SgEiJbmVLHeuET3VLHeuNK/VLHeu3:Twv53GFyZou4b+BZ+gA+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731574389, "uuid": "65605e70-1ae5-4a51-8846-c4431ed2c947", "value": 912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574389, "uuid": "bab6c5fc-cc49-450c-81b3-6c09af38cbb5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a26f6f-a265-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731574393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574393, "uuid": "6560aaa6-aee8-4f64-97b7-4005024d5c5d", "comment": "Malware payload", "value": "e942cdcfe25be4a2236ca12898229a17", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574393, "uuid": "3da859fa-f092-4226-8d19-b1e7ba12473f", "comment": "Malware payload", "value": "18c8c82dab97a19f892212826e28ef107fe57b02b7c021e418f0ad0cf81d13c6", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574393, "uuid": "d80e9438-58f3-4081-addb-cd7383d509cd", "value": "T11F42271140C4B7F58212B070EAE17CA3CB77EF00E667DF48FA4D8825DD319DA590D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574393, "uuid": "0c822b89-92b1-4733-85d4-f42fe7831785", "value": "48:dhR0g4iAwFsrSy//0Oe5jdSFJ3vKEXXXKXXXgXXXGXXXMXXXKXXXgXXXGXXXMXXm:vuVrD/ZzfKVZTWgSm0u9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731574393, "uuid": "bd6f83cd-30f4-4715-b305-ebf8f830396a", "value": 12590, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574393, "uuid": "3b3d9532-74a6-4afa-8b96-da580550d1dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1731575603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575603, "uuid": "6941f914-5ef5-42dc-a18c-37b5d2ab554e", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575603, "uuid": "225c2214-357b-4697-8609-854cb04d6792", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575603, "uuid": "1465f112-325a-40ef-8aa9-6a4ecc334103", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575603, "uuid": "f2b5ac19-3017-45ef-871a-1c146226086e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575603, "uuid": "52a50a0b-695d-499a-a0b7-8a1f2191c4ba", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731575603, "uuid": "21a73b1d-44f2-49bc-8c8d-cfd6fb858e4f", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575603, "uuid": "0d2ee056-ef1c-4f5d-a67f-31196fbbe43a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfae515-3837-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1731575654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575654, "uuid": "7fd32b3e-ceb4-457d-b0c1-44d588f104aa", "comment": "Malware payload", "value": "c3c561c20e48169f4906c6b0b135984b", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575654, "uuid": "a13766c3-d904-4962-b3dd-1c7141c7f44a", "comment": "Malware payload", "value": "b914abc696286a639a847d2e3a4a36ff682f30a87b08c4ffc61f2e0cf5e7ec5f", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575654, "uuid": "e3dc2436-1006-40da-830f-385dfa10290c", "value": "T1ABF53329C35BA51C444DD111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575654, "uuid": "3e1c0010-0416-4213-8704-1e74e70ce90a", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1luc:SyrPO3UDsdXp+z8+FWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731575654, "uuid": "d34ba8c7-3889-4825-889d-bc47ac910079", "value": 3526945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575654, "uuid": "f1ad21c9-6e4f-4bc2-ae15-861aeab7007d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "921b39f1-a269-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731575977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575977, "uuid": "939ad84c-cb17-459e-90c5-a075990cb76d", "comment": "Malware payload", "value": "2a71f3b06884f8811eee527c4fd09150", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575977, "uuid": "f623aa7b-5ede-41ca-9780-1b10ee6ef247", "comment": "Malware payload", "value": "63779b7b6477075ce95eab2cfa93dd5b4120954ffd8b13f2c054a2b07b4035ee", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575977, "uuid": "3fd4fd32-bc5f-49ca-9b7a-3c1068fc8b86", "value": "T133A5FE3670C512A48D8A3AC681455372EABE99C29EF3CDECC8C9CBB16514C7CB52F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575977, "uuid": "628bbdd0-22b2-43fb-a711-af5d57da7254", "value": "384:b+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+qM6H+q9:x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731575977, "uuid": "faafecb5-b7ee-4234-93af-8f46f9e6c80e", "value": 2097691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575977, "uuid": "27ec60b2-cba5-4f94-b603-076fe1f4e904", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95a41cd0-a26a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731576413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576413, "uuid": "c2a38abd-d48f-4873-925e-7fb756f61d3c", "comment": "Malware payload", "value": "40fe51686173908ed35819356543a349", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576413, "uuid": "2bb822f9-d061-4237-9ed6-f13c8d8ca799", "comment": "Malware payload", "value": "bc9afcc0ec7e45dff66cbd62df6a3491494e0e5c9b0e65be82f7796a2a1affbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576413, "uuid": "bff6624f-473f-4dc3-a4db-953f6a7c06ae", "value": "T1F073F999B992DE17C6D852BBFE0F82CD372163A8E3DE3203DD14AF55368A45B0D2B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576413, "uuid": "98cc610d-6660-474a-bccb-b14cb0f268b3", "value": "1536:hwRGfSOPiSlO8fBU9/aG6y/8+UnrQZmwHrLq8J20nzsT:hoOPiSdU9/aG6y/5UnrQ1Lq8U0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731576413, "uuid": "d806cc70-a8df-45f4-bab3-891ddf1f109f", "value": 75864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576413, "uuid": "069d33a1-94f6-4ab6-bc70-d44c5ca5be1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "366b9181-a265-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731576883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576883, "uuid": "76889c4b-3beb-4156-a6a9-a0929e80172b", "comment": "Malware payload (Healer)", "value": "2ffe7c4fe26d0674b29fe5e66f445284", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576883, "uuid": "04294284-9fdd-494e-8a0a-58982736b359", "comment": "Malware payload (Healer)", "value": "8eb399f775d3db740a67a3098c38eba7da3e282c8e4d9dc84590e7784c564850", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576883, "uuid": "dc76c5ef-b82f-4ceb-9bae-173032334c06", "value": "T10AD53B927D5671CFD89A12F4547BCE82B97D42B9871048C3DC58A4BA7EB7CC221B9C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576883, "uuid": "d8fe501d-5e1e-4e3a-aac4-2ff2ed2d5575", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576883, "uuid": "20fd09df-f417-4884-9b12-506ee0a9ce6a", "value": "49152:nm/71Ud4T1TR4wUIdj10Fj7/qDNRWdCshC:m/71Ud4ZTR2IR10FjGDNAs6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731576883, "uuid": "27c04aee-3da9-4b92-bddc-961b2811be0e", "value": 2785792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731576883, "uuid": "568b3c81-9e58-41f7-8429-509741a1c5b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16734bfe-c902-11ee-b9d1-82aee05be84a", "comment": "Malware payload", "timestamp": 1731577029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577029, "uuid": "cd2ad697-6403-4851-bd23-b29bb4c850b2", "comment": "Malware payload", "value": "3a9349af006440c7e0da677724551239", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577029, "uuid": "95ccb2a0-40fb-4389-b94b-eb236f91cd20", "comment": "Malware payload", "value": "00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577029, "uuid": "be173d40-954c-4c7f-8175-53c2eb7eaf06", "value": "T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577029, "uuid": "3c8fdec9-d8c7-4454-b83c-d2123fc032e2", "value": "24:8NqDOlC82vUKJU1+IMJ941y2bY6HoIab/C8fn1vURXTUmu3+IMmmt:8aVnvZJUdMs1yE3HVabhlUymu3fMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731577029, "uuid": "bf6a26e3-2b0a-459b-81f1-260a964a2dd4", "value": 1952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577029, "uuid": "a42b1ae8-ef7a-4a29-a201-7fdcec341b34", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2edd9b2-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731577375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577375, "uuid": "3bfc44f3-23c1-4057-a962-ccf2587b722d", "comment": "Malware payload", "value": "d1072cd0e16432b9e5abb56a60152c38", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577375, "uuid": "ff35861b-6980-43f2-97af-834127d4a0db", "comment": "Malware payload", "value": "b037a09431998d97d85e930f5df034970b10b5f61e44e9c5c1beb79fb9c83132", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577375, "uuid": "7c178640-c520-48e5-9e32-5b5006f9aacc", "value": "T1A634F0B37ABB9910B60D07D5F82B4E95C4EF4894BF4DFA664F902E805E181D9B0283", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577375, "uuid": "dec0b4c8-4eff-49a2-ae12-f4795732f1c5", "value": "6144:om4gpfkKb9mwJyY0k57KU68WyVkmH3mUF:24j9yYo8xf37F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731577375, "uuid": "1014233b-98e4-4ad9-b0bb-f2d77efe0777", "value": 247877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577375, "uuid": "f97e5201-7778-4983-948d-992a732e6483", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1731577986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577986, "uuid": "8b76bd58-11ed-499c-a004-d6accf617827", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577986, "uuid": "baf304de-7616-491a-856a-2390cca9ef5a", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577986, "uuid": "b1284ffc-6973-4342-a698-46641f5a02ae", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577986, "uuid": "5485a63f-30df-47d6-8016-67e6e4d50d8b", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731577986, "uuid": "177fb7af-af0f-495c-a641-65c6293d6c56", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c34f8f14-a26f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731578637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578637, "uuid": "ea0565a9-ddae-4704-9044-bb2c7b08246a", "comment": "Malware payload", "value": "79dae378e8e4c0dd4c60eee54a619414", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578637, "uuid": "e6f769fc-0f94-4a2f-99a4-82d93b732072", "comment": "Malware payload", "value": "2c375b0fe42667992b9281da02acab61a697e3694479216811848dc7459f73bb", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578637, "uuid": "bf3fcc9f-4449-4712-85d9-88d58c7c4f86", "value": "T1E6E533307D79ECFE49BC823CB1BFBE1C5E741B6B888951EB8B883483929E78155195", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578637, "uuid": "24739fe2-1bb5-45a4-bc88-25f01e4fdce1", "value": "49152:x0QdW8FgG8Kbdyf7NQjDvhII6VQZmDhOxk:8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731578637, "uuid": "57173d23-2ac4-4aac-9dd4-93ed80945993", "value": 3049762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578637, "uuid": "4aa04fae-a0c0-44a1-a514-211de88b5aa5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d98a32cf-a26f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731578674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578674, "uuid": "ec4b188b-1700-486a-85c0-df7461ca6e24", "comment": "Malware payload", "value": "30e4e69451b83b2fab681e6eaff8d0c0", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578674, "uuid": "030556e8-2618-4275-b332-a5eba3b5c3d6", "comment": "Malware payload", "value": "1865f925950613455c3a67d0d9e7c9f0f55ab5aa432f23aa14e7465a25e9f873", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578674, "uuid": "566de116-ce92-4814-904a-fdacad096060", "value": "T11B24F0CAB24CA7F263091675C2C700EAFF562DEE4F344687D2DB847B2421235569B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578674, "uuid": "ef645b27-f541-4701-b61f-7a6d65595f69", "value": "6144:64qexukSAbfKRJUxZiD4z+ODgp35EYWN9diRlL8:9puwbSEx8D4I35JeSvo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731578674, "uuid": "e680bcc6-985d-4dd6-84e6-e2e627a28773", "value": 213113, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578674, "uuid": "71106b65-833c-4e75-92ca-256e7a35be2f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f940e478-a26f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731578727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578727, "uuid": "d6c6fd97-cbf6-40a1-8390-2c90475be5a7", "comment": "Malware payload", "value": "9a719e2454c4bc056dbebbefa7b5bacf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578727, "uuid": "481ca149-4ca6-41d7-849c-4b543c4ccda0", "comment": "Malware payload", "value": "589e581bcf52b5459c64a2787a81b6d57488fdb67f0a8ceee48cbba971763286", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578727, "uuid": "9f19f8e2-62d7-48f0-971a-6d9a90bf864a", "value": "T13E2232E603943576EE5C5D3AB79298D432884FF7DC810D049DDD24AAC28BEE83C22E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578727, "uuid": "5397ff9b-1757-4688-a30e-de1d0264cde7", "value": "96:pfP/6uqTXF+273tpLj87c8rDYgIlJuopwFoZLvTQEBRhmSTRDYgIlJVIopwFoZLL:+s1rVopwFoZLvTQmopwFoZLvea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731578727, "uuid": "c3ce16f7-2092-4f69-b27a-6c796dcb7959", "value": 10746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578727, "uuid": "175cc81c-4a93-4cc2-9099-14b80ead39d0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0862f411-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "cfe85799-c347-4374-9cfb-10634db096a2", "comment": "Malware payload (Mirai)", "value": "046dcabaf1e1225da634f89ed7a6efab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "96138cfe-e9ff-44ee-8243-fc1ff2c76e51", "comment": "Malware payload (Mirai)", "value": "a6e61bd560f44884cf88cc43fafd79ec0fc04c25ebd28df292f093a78ca0d9ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "a702b42f-8f4d-40ce-bd40-93c41cb20986", "value": "T11BC2D095E59E2DE7FEFAAE725C92A7D033E50FB5B78296906050C791060B222F8458", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "56e2dd15-ab9c-4190-928e-cdee5ce1598e", "value": "768:F3YLiTZVtjTLiO3QAdKh0cO4uVcqgw0zT:BZTZLTL3e0cO4u+qgw0zT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579612, "uuid": "4115b37a-bef4-434d-9a79-f0482406ce13", "value": 27192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "ed1374fa-ed75-4d7c-adce-5fdec0c69eaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08739c48-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "afb33308-2789-46d0-851f-7385c0e230b8", "comment": "Malware payload (Mirai)", "value": "63c4b802c457aca8f4059fe42ac6e671", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "60eae590-e763-4d36-89db-710aec40db71", "comment": "Malware payload (Mirai)", "value": "75d1a0d4f2dde3e8269364f400b79d8775cd5a3583f49945f1ec780d5c8c9394", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "9cf7ca3c-9838-47da-bc6c-b3bba5b93dfa", "value": "T1BCD2D17C2B0B01CED53B81F9D6F00B142E652EE57461F80F4650AAA6D9D05F072EBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "ed075685-bc33-4482-bbb2-feffd9966973", "value": "768:1qV+dOnq6bj9EGyAhsI5izUBEZ0Dcps8snwzOccYDXJgGlzDpbuR1Jz:8V+dKd/ZhsIOUBq0Dcps8QSOccYDVVJ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579612, "uuid": "228ab9ac-17bd-4b65-a2fe-895d7c392788", "value": 29500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "57e57298-32bd-46c5-9afc-d82d4b82766c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08765a5d-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "a74d1438-1489-4f47-b246-dc92d304c437", "comment": "Malware payload (Mirai)", "value": "0507617d8e09300bf320de5e4403e5f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "295493b8-fb7a-49c8-b0e6-41385c686786", "comment": "Malware payload (Mirai)", "value": "a8e577259ca93116ad0795a0d04bc779cc0fe8eaf72ff8fefa3c346b84bcbaad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "2aace6e5-1e64-45c3-80ac-cd6df7d8a682", "value": "T191438D26E51A9E98C4464234B4558EF41F23F1C493632EB71FE282B25053DACB91AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "804ce717-818b-436c-8d9a-f4233259fb97", "value": "768:JajoIe4iYcesDedtQLrhko2UcfdatyRRMU8bNBrXFynfktFC4otPiLHCF38w6:Ja5WvsKlbcfoKRKBMk/ktAHCF3d6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579612, "uuid": "68313ea5-3f53-4bae-8562-183f8f7329a1", "value": 59716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "26fd18a1-6889-4eb3-9f1c-4c06509fccce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "087a5e4e-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "dc098fe6-1a95-4759-833e-937d35793285", "comment": "Malware payload (Mirai)", "value": "5c69eecca04c52ba4873caa32817a63a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "62d1ee48-7b61-4dfb-9247-8a08f3e68777", "comment": "Malware payload (Mirai)", "value": "553812ef3630de6fc74c92f21d6ddcca71742041e3e8987c60d190fd492dcab0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "9ea7e5d6-e491-407d-a421-f19c7815c625", "value": "T1C8634A25B97A2F17C0E1A47A20FB5B54B2E156CE26E4C65E7DB20E8FEF116006403E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "ae5a7334-27f6-4091-8bd4-1b4d8edac542", "value": "1536:bF5vmPu5QqwYrfPIKxo+AkzW+kBlGcTaHR2QOi3L61:p1BhW++B+HR8i7A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579612, "uuid": "1304b9fd-69f9-4c0b-ae83-5608c5d88dbc", "value": 67240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "5b97a003-4ef3-401f-a098-7d7df4b96d2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0888f4cd-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "0e7700f3-c884-4a9d-9f1b-c25bf2740ad3", "comment": "Malware payload (Mirai)", "value": "c86c470cdb064d36810a0bde3c7aac27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "d659a0aa-9ca4-4131-a2ef-b2326b8ddf53", "comment": "Malware payload (Mirai)", "value": "bf16f79564a570cc7773fcb1238c1ef0b15d570e118bb425de510a79df608fc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "4be18634-b946-4384-a5c9-bedf1a10ad67", "value": "T17F3302119AD7C5A391352EF1F6D48C6AFB06BFF9DFD62A835220226108712C3A3E55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "087774d8-f8e9-4937-894c-9515396b749f", "value": "1536:4idTF3mK7T0taOAM8xQY8l6yhDg4LXEwwbsB8NKgUz:r7J0tn8xQYa6kDFLXVwbsB8a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579612, "uuid": "578e01e2-b58d-4c32-906b-942cca66a8d8", "value": 51944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579612, "uuid": "10c8df9b-6c4e-4728-bab4-76be8d8ece68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "086503cd-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "ccedf7e8-8021-4881-81e8-c749b3d4569a", "comment": "Malware payload (Mirai)", "value": "d7f1b916c9e5e0628c381eaac456af66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "d32ce2d8-a554-4d5a-8c06-221eab3d3102", "comment": "Malware payload (Mirai)", "value": "0cd61707e1c0c608d2177f15dc6e933b492b6788cb1f891dc10bc3e2b2be842f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579613, "uuid": "217335b4-15e8-4cfc-a320-b2f3a152e7b0", "value": "T157E2E1946107C6D4C2B2A93AB4A90E4B37A61FFDC4F8355391EA72191EC14D33DB4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579613, "uuid": "89a0dcf9-9b48-470f-a406-8bb1d11a7f53", "value": "768:SMrtj19LjZhzjRQVHy0xv7kYWt9q3UELEW:Sktj19/3z9qFnZLL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579613, "uuid": "f7a83060-b9e4-4515-9a31-32e66024e4fb", "value": 32236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579613, "uuid": "b72f5521-c87a-484e-8578-2f2ac137f584", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0892d409-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "92884022-f58d-4cc0-b506-d7d267123ea5", "comment": "Malware payload (Mirai)", "value": "676a0f6acc13e9bb60c29d4e782e4c20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "07c22f2a-37d0-489b-9fcf-8c5c44c6f61d", "comment": "Malware payload (Mirai)", "value": "41c8d78f83a50f94840446855f1b61ade53669b463ec53c0ee6d68aba44d9226", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579613, "uuid": "29b0706f-6780-4e2b-82a5-2cc1049597df", "value": "T1D5535B9AB8029E3CFD4BE67D44160E09B92473D152C30F27A2A7FDE36D731A45D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579613, "uuid": "2e953d70-0a7d-4e1d-9212-8c4801ad8d8c", "value": "768:2aeqq1b164idRMwxj1JBlMe2mlUngv67vtC/IUuL0ldxw7V6LEufCd8dgGK6mo:2a0x6jzwTgosI9L0dw56Yufa8rK6r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579613, "uuid": "f8685a8b-b3db-4593-8dbf-68d8983a0226", "value": 64788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579613, "uuid": "962a2a51-f0fb-4b56-ae5f-0b99e5058d98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "087b9aa3-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579614, "uuid": "c893b60b-62a7-484b-96cb-59c274f44649", "comment": "Malware payload (Mirai)", "value": "afe44e80766a3b57327cffced0cb7d18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579614, "uuid": "1e81ad83-a5e1-4b8b-ba00-793362c70437", "comment": "Malware payload (Mirai)", "value": "64f5b3f67a87c022f29ab50b57cac3dbb7a161226fc10677d24f643b3dce9e3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579614, "uuid": "351f63d2-e507-4449-a7a9-65b4c8108c21", "value": "T16CC2E0321288B550DBF45837462CCA86228E23B895F77063499097785BF7B09A6FA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579614, "uuid": "3df5aafe-e361-4135-80a9-d62505b5edd2", "value": "768:zFnFbK/hXdrEQOh/S6k/1Ky3MzWs3Uozw:zFnFbK/hXpoh/K9PMvzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579614, "uuid": "61feadac-5cc1-4b35-a089-8344eef428cf", "value": 27288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579614, "uuid": "27dcd664-0461-4c59-aaa6-7b08919de9e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0878dfe0-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731579667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579667, "uuid": "e408ff55-4390-41d4-918f-ff10237a451e", "comment": "Malware payload (Mirai)", "value": "346159f1251e2b5d1764bca5fa0b9d8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579667, "uuid": "832b0c00-5e59-4426-bd08-841c0a427205", "comment": "Malware payload (Mirai)", "value": "1ee09885033a556715e32ed801bcf32bdb030f61619e262dd2c0235fab45fc54", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579667, "uuid": "86c7a042-5e9c-4dc1-bcf5-19f920347ae0", "value": "T1E8D2E1BEE5F92823CE5A3DBD50A80AFC1EE162C0534A4F4C475689C6732E55EF8C91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579667, "uuid": "8dd16441-40fc-4cad-bc0e-14f8fde61197", "value": "384:112dQo/hRjmRwHaHi6v0RGQFt3qVV/q/OoKjyqoPDLdGvFaB+ZhU+n6i12BPjdMs:aQmhRkMbOniOomtXZugyBRlVUijW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579667, "uuid": "0059b360-6331-4a02-a474-42e893c60609", "value": 30696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579667, "uuid": "7983e447-45d1-443a-9107-f2a883f84a35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bc9d0ff-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731579805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579805, "uuid": "6e087c7f-6fbb-4713-ac2c-a7a17853813a", "comment": "Malware payload", "value": "dfdca48cf6c9e2d37a743ad1b8b38993", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579805, "uuid": "dac3ffb8-aba5-4231-9811-0f1df2e97db8", "comment": "Malware payload", "value": "80db3bef045e8521daf6d72758f6f8ab8d124ac43c1603761219881f288c728a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579805, "uuid": "40e5a483-485c-4cf2-890f-b5998cb3a359", "value": "T1EE0612ACF1026C33D6A7B6BDA0A35729DB23E08351D85D9378E7592C0B4B6143F362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579805, "uuid": "649e77c3-2a10-4311-8907-93e7ed8dbb95", "value": "98304:DhE57rKbTvA/DFxjtOR2sh8l2IoDdR1kEOdW:Op8TY/xxjqu5oDdR1kRW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579805, "uuid": "54a132e3-9f5b-43de-ab81-57b688f71d3a", "value": 3934646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579805, "uuid": "4493f865-3f15-4324-8690-c229c20bfca0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9079f14a-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731579840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579840, "uuid": "18ea0a45-2ca2-4444-90c4-a5cb7eb33ff4", "comment": "Malware payload", "value": "37ead11073590555ada780e653d90b1b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579840, "uuid": "398a3404-9967-4919-9d1e-7159526ccf83", "comment": "Malware payload", "value": "6446ee0ffc996fc4a010ba0dfa1723fbe1977369a7f547e4a18c72e018cb2ac4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579840, "uuid": "f2f17df6-893c-46e3-bfed-99f6eaa59257", "value": "T1CAD53A8B62B3B54BE662BCAD4205AB02854B1C7A1E11B1F5EF35872462FF9D3C4673", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579840, "uuid": "25707cfb-94ff-4445-af1b-98c8ebc2cd2b", "value": "ace62586a99cd94b3404d807008ae88e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579840, "uuid": "940ea9cb-9db6-4bed-a04c-b0ecfc4af0da", "value": "49152:wGEs3d2XPdz5v7lVLODcFONjE1CiKHWH2At4Btn4QfY4Btn4Qft:wPs0/vuEKE162HPYtnDwYtnDF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731579840, "uuid": "0165788e-d7eb-407a-b9c3-a9c5e7f0dfce", "value": 2885120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579840, "uuid": "e0b6cfbf-2c13-41b2-bbe5-59e99dcf1c24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "324fafae-a274-11ef-afe5-82aee05be84a", "comment": "Malware payload (Coper)", "timestamp": 1731580541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580541, "uuid": "554b7375-f9e9-4630-b43d-1bb9f95ae127", "comment": "Malware payload (Coper)", "value": "0e6b33ba825b5e5ce5e2caa03727cd1f", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "coper", "colour": "#d1a52a", "exportable": true, "hide_tag": false }, { "name": "octa", "colour": "#3a2375", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580541, "uuid": "fedf6fec-d302-432e-bd64-75bb5f0a8ea1", "comment": "Malware payload (Coper)", "value": "4928c563dc610a7c968f697e4ebcda9a441d94a4abd5013c38dfa8e8b62cc4f5", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "coper", "colour": "#d1a52a", "exportable": true, "hide_tag": false }, { "name": "octa", "colour": "#3a2375", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580541, "uuid": "174992a6-b702-4ab2-9b3e-577f3f10bff9", "value": "T18818F253F60988BAC996B874828BC3B2B5243C15D311A1CB7E04F925BE777D49F397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580541, "uuid": "72db5f34-d71e-4dd8-a511-0cc6ea01e0e4", "value": "1572864:Ay/UiFkHpKS01NL4iasXbSyaYdtUvkXQ1eYJnrHAFbPlPv5hA+1:Ay/UiFD1No3lLAVPlPR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731580541, "uuid": "aa65ac1e-b5bc-4052-ace6-a48d84eefc5f", "value": 93057219, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580541, "uuid": "60f1e13b-e527-4fb5-809d-7183327b433e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f2a7de2-a275-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731580912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580912, "uuid": "5899b66c-42b5-454a-b139-6b31e338aa74", "comment": "Malware payload", "value": "ad2853069057c3a5690b9e6f353275c1", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580912, "uuid": "c0a75550-cc5a-41ed-9e7e-66a6122c1632", "comment": "Malware payload", "value": "757e0367b9390a10dc654f06a6ecb119db545efec48dab5e18ee44d590b514c5", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580912, "uuid": "b6a83255-c1e5-4345-8b58-aae2f4f6db91", "value": "T18C34F0A627B5FDBF2EFB4D10984195902E2FCA6AD9AC54F73E241B4527C3FB012781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580912, "uuid": "497c4ed0-ab30-46fb-8cc7-3a0215f3fd42", "value": "6144:QKAnyO8ECYP5OyobEpSscLnBVlo9jhM76:biffiNo9jhs6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731580912, "uuid": "a2113a13-b1e3-4a77-9782-370722c5f965", "value": 247890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580912, "uuid": "c7b5f7b2-7673-4414-afdc-fc67b52a252c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1815509b-a275-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731580927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580927, "uuid": "7632daa3-527e-4302-ae54-3fb6f7533698", "comment": "Malware payload", "value": "f979974a6045c464bd435c0cab921fb6", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580927, "uuid": "fed53298-7559-4f97-b37a-d4fa46ed41e8", "comment": "Malware payload", "value": "8635b39d52f423605e9e55a57f74591515552d3a1a80a71f0632ccb20e612111", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580927, "uuid": "35124c0d-c07a-4488-a87c-4e3bd7d8d303", "value": "T186851283940C9F3663DA6E82BAD81182D5D0930CE8DD97EE2413ED152FE365E635A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580927, "uuid": "4c9e4f81-41a0-4d16-8009-6f6b5971f813", "value": "49152:RvckhJfv84d1ICeibqmF01oUenVcGSB7LcsR2zPajmlmfp:RvcWJMybF1xVcpVjUGp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731580927, "uuid": "db7e1405-0307-4496-9caa-f17d48a2e1a5", "value": 1792330, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580927, "uuid": "1d2ae034-a73f-46f5-bd6a-cdfc890c85e2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0d3e548-a275-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731581210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581210, "uuid": "ecb8942e-b788-4bb8-9c9c-ea13f20cb93e", "comment": "Malware payload (LummaStealer)", "value": "fcd9eba7d5afc1369f8569bd2df6a8c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581210, "uuid": "0709224d-cfd7-4654-a299-144607b8e657", "comment": "Malware payload (LummaStealer)", "value": "27b8c23fc5623f7116b66dfeea530cfc3489ed798ca0c00c388a296f99233fa3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581210, "uuid": "d5f1e40e-0032-4567-bed9-33875b4f1fd4", "value": "T1B2D5398B62B3B44BE662BCAD4205AB42854B1C7A1E11B1F5EF358B1462FF9D3C4673", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581210, "uuid": "e274c418-0a28-4570-a13c-7b2e5d6e366c", "value": "ace62586a99cd94b3404d807008ae88e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581210, "uuid": "51d0adec-d92a-4b70-b3a8-a7b1a4786e30", "value": "49152:WGEs3d2XPdz5v7lVLODcFONjE1CiKHWH2AmaoCSc/aoCScz:WPs0/vuEKE162HMaPSQaPSK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731581210, "uuid": "86e69323-e1be-4c78-b661-c3799ac571b3", "value": 2867712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581210, "uuid": "f2130837-2984-4f40-b3e6-a622e44980a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba045fd-a276-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731581389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581389, "uuid": "b4f8bd67-f3ab-4b97-85fd-638b6f8a069d", "comment": "Malware payload (Stealc)", "value": "4c71aa73dea7981c367ba1455748f131", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581389, "uuid": "245e120c-7e87-493e-83e3-91c258e27f73", "comment": "Malware payload (Stealc)", "value": "fbd40c2ae57071b7144eadf53cf907e57d6045717b52c168b7d38b28bab4989e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581389, "uuid": "1a99e920-cca0-46c3-b628-814662b269c6", "value": "T10F85336A5D8125DEE5C8173F3596AD9733E8EE517CD770A85D0B2A91F3A32CB2D20C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581389, "uuid": "ee0dd629-203e-4c1b-9d29-b18c3bfbbf24", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581389, "uuid": "827f9c77-f63c-496d-a44e-0a4aa6054a0e", "value": "49152:sEeThaQW3tmG0+vFajeJ4zYESur+T/uB+L4/:sFThT88GdtaPius8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731581389, "uuid": "080b1cc6-b831-4669-ba25-20e1017c1ea0", "value": 1805312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581389, "uuid": "eafd02d2-1760-4244-abea-9d7e45e78a6b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31ce08a5-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1731581829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581829, "uuid": "a4269c32-204d-4166-88bd-75e9316e1a2c", "comment": "Malware payload (RedLineStealer)", "value": "18ba97473a5ff4ecd0d25aee1ac36ddd", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ReflectiveLoader", "colour": "#E7ABD6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581829, "uuid": "68a34346-daac-4954-8033-72e999a0c78a", "comment": "Malware payload (RedLineStealer)", "value": "feefce2d619431c33f6e7167eb467df24ee45b45a8b7c8f804cdf0aa1a04b732", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ReflectiveLoader", "colour": "#E7ABD6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581829, "uuid": "8d53d07d-cdaa-4fa7-b3c8-b7cc9bd45c53", "value": "T127B2622BA3A626E8EC78E935CCF3562EB8A47468433017FF46B051176E752E0953CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581829, "uuid": "749c321b-6465-43fc-a313-57a42d3abc3f", "value": "87bed5a7cba00c7e1f4015f1bdae2183", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581829, "uuid": "bad937a5-fdda-4dd9-b6a5-1e8f649d46cd", "value": "384:XJxUsqwM3Eg8nC5mzn6NUeYzcjikxJzvSryqbsPDhxWBtIBjMKPA7U8yW4EU:XJxUs1oYzcjv4IfDBuUI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731581829, "uuid": "223dc91c-a14e-40cb-9f26-848cb2d5bf48", "value": 24064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581829, "uuid": "9f22f6be-e0ce-405c-8889-c935014e1091", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77648965-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731581945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581945, "uuid": "abae96b6-4e2b-4e68-86a9-d94e5dfc631d", "comment": "Malware payload", "value": "049d70a4d97479b6fe08c08f425fdcaa", "object_relation": "md5", "Tag": [ { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581945, "uuid": "89846cbf-d333-4a07-a22f-3d3df1d26a85", "comment": "Malware payload", "value": "e5b5bd66c68faee054bd6c9ea0fb9e797f87b3ce176be13120eecf3179b5d562", "object_relation": "sha256", "Tag": [ { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581945, "uuid": "0184d1e5-3365-4e54-93eb-3bcd4efb0e59", "value": "T14D01C05A5660A350C4801B0906C8C9A34ABFC63F58B2470CB06CB7057E337321EE53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581945, "uuid": "e13007e0-1595-4731-a6a3-5e360d9b2f05", "value": "12:jq/4FIp1Ctf8w0V6R8wsuomgYT3HtwsDDiaYhj7MnURxfq0RUMwQlaSucRzQ7:jqAS7yomFT3HtwAG7hkkZUfb7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731581945, "uuid": "188700b1-8d76-4a90-a5a7-b9ee76657626", "value": 723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581945, "uuid": "7071a033-c40a-494e-b0b6-b976be3933cf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0889907-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731582068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582068, "uuid": "22c761ab-7e38-45dd-88f3-669209f9bf63", "comment": "Malware payload", "value": "cd8bf4ce178ef5ddac77933d03ffb381", "object_relation": "md5", "Tag": [ { "name": "open-dir", "colour": "#d9b789", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582068, "uuid": "cde800b8-6349-463a-b18b-88849fac7f44", "comment": "Malware payload", "value": "411f8e6f968ab1f30ae5604f2b54667ab4ad40c176feac2620ce18700235d97a", "object_relation": "sha256", "Tag": [ { "name": "open-dir", "colour": "#d9b789", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582068, "uuid": "d0fa7ca2-7752-400f-97d9-6418113f4157", "value": "T133D02B3BD94120E5D41118E98D635785CD4810C16DFD917C67E24E0327C154BE8341", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582068, "uuid": "92c98d5e-71c5-4b6a-8ba7-3fd64ba0eb0c", "value": "6:zrNrUStRvqKvT6Q+KczbUy/i3MszTQdQXMbovEGQmWA4Rn:zr7RF+KcUakMOcvGHWrn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582068, "uuid": "f943c373-22a1-4a09-bb83-0935b1be795a", "value": 267, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582068, "uuid": "8e303cb8-4edc-4873-9aaa-c4d4452d64c8", "value": "application/x-wine-extension-ini", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0b78217-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731582068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582068, "uuid": "d9f8bc3a-1cf5-47b0-b700-80668d86e275", "comment": "Malware payload", "value": "a882eb604b37bc8ee47da9eb913a7a21", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582068, "uuid": "29c11865-dc64-4582-bd27-007a5e352afa", "comment": "Malware payload", "value": "4dc015625d321c73bc47f6d9124623689e4881c401667c35f536dbc063a766a8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582068, "uuid": "9390f684-aaa3-4e2d-bbe5-5c0f9e8e6ee6", "value": "T1B1F01DDE05200CE885368D3B32A7487A42A7D9C848D781485BF0C6F596EC93EF4CAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582068, "uuid": "d016f87a-5fa8-463d-aa3d-b6ac19dbbdec", "value": "12:TJokoIgKTaD2RDZKEb87avivqvjKTvnkIQ6KENw81nVaDkVaDIVaZKTVa9YFLVZJ:Fzdg0F/R1vivqvj0v5P7nVgkVgIVo0VZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582068, "uuid": "0de3fc0f-99d9-4eb4-b36e-4b8e4e903239", "value": 620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582068, "uuid": "2d18fd94-75cc-46e1-9ce5-1d1b3d5bc03f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0d19fd1-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731582069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "8329e027-47a5-456d-b30d-f72f02fe74f7", "comment": "Malware payload (Mirai)", "value": "18d166aa0a8825bfc772a23899028817", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "93f1b8a9-59fa-4958-accd-48399927ef02", "comment": "Malware payload (Mirai)", "value": "c90a3da886eb3ca64580bf336147c75b05f9b2cee7fd060164e0102799c114e8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "bf5e4577-e2b9-4f2b-8c8a-cdad52b58a84", "value": "T13E63290329D0C1FED488C974AA2F9036D963F1BD1339768E2BD47A367A46E211F5E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "1dc58ebd-35ac-4db0-aac5-abf730d2a231", "value": "1536:3u1LbYmm3aSuCKiilvIeAecynKMy1sekB:3u13Ymm3PEiilAyxyu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582069, "uuid": "9c163c94-8336-41a7-8d0a-85e81ed90a2e", "value": 71776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "556a6d68-7f40-4f39-82ee-5062a763b952", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c10b9513-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731582069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "81eb0ada-8a22-4f8e-85d1-f9d02114d8e3", "comment": "Malware payload", "value": "720e300a9ee136efc76e2f446ba2e198", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "bc1a8c11-4668-4508-9980-b173ad90aa13", "comment": "Malware payload", "value": "365d8bdb0d49d70f45e6016dbab6246a150977c585dbca97137c04616c544e3f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "8afb7bae-89a4-461e-8aa3-381a8c6ff3fd", "value": "T11363A3CC69E81A36D22099FF6B616F20107250973D64BBDAC1B98CAF25367E9FC451", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "111af5c5-eadd-4a9e-867a-0335da982ee2", "value": "768:HdvBEJxPLfBeyRP5scQzIBPW6AvH1ZZxGPPXxaBI1I9Ba374INRd9TcHzmj18u6s:9vWzNeyFM00wLPb8u1zJeAOQomd+xzA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582069, "uuid": "87929a53-9b51-4d0f-882e-8507295592d7", "value": 71680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "3321175a-c6aa-4db3-862e-dfd41b3d2e88", "value": "application/x-tar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c124f5f2-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731582069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "6d432752-75a5-49f0-be62-d78f7a5a6f21", "comment": "Malware payload", "value": "28f63c5ac76588ee9f950c8a1d2d2581", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "ca3b182a-4d4c-4059-b63a-6812209c0b59", "comment": "Malware payload", "value": "be78ccb9e6a07841cdd4ab86698c4f6d8c9d9011139ee0560edba5072ba8d538", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "2984b73f-bd91-476b-b7ca-20fa74e37c32", "value": "T14FF57C57BC9115A9C0EED23189A64252B760BC991B3023D73F10F7B82F72BD86E793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "a42b8d24-4ee7-40c4-afca-70e05b6ed14f", "value": "49152:8pd24A+I1Uorb/TSvO90d7HjmAFd4A64nsfJCGsB1OrtyRG/g9KkSM48WdoD1Hw2:fktw12XZzXhD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582069, "uuid": "a59eaa83-443c-49dd-ae7b-e01005134adf", "value": 3431050, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582069, "uuid": "b1129119-c4fe-4924-b045-058b219da674", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c16a532a-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731582070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582070, "uuid": "821063a0-57b2-4a85-850e-4eebcded64cd", "comment": "Malware payload", "value": "1cb32d39b5ee93647b91e6f187ee358c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582070, "uuid": "2b9c86c9-5caf-4e10-8ee2-6d6c049888b3", "comment": "Malware payload", "value": "f29d34ed64a00eb5b46407610fc3d876ca8086ce4401ac383af5e4d27b099c74", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582070, "uuid": "6b8547ad-d41c-4371-928e-013e64f90bb5", "value": "T1331181ED56741C91FA704E1637E7889496C6E6C820EACA0CB6E5A5F481FCD30F0963", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582070, "uuid": "18dccd6e-9f01-454d-8804-a9e3d61f59b3", "value": "24:3J3/IfAFTp5e5y6Lzdg0fFvivqvj01HVgkVgIVo0Vg:tRgEAUcjQgag+oKg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582070, "uuid": "684906b4-8e19-4a90-8ee9-07a0a0cc9081", "value": 1063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582070, "uuid": "75d2b8cb-3e9e-45d2-8d46-d98a3730e53d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "974663e4-a278-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731582428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582428, "uuid": "fff02e35-bec0-48f2-85af-297994dbc1d6", "comment": "Malware payload", "value": "b93f3c83bb12da984b157e457796b537", "object_relation": "md5", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582428, "uuid": "6ab7394c-c5fa-4c1c-a9ab-1bc6497e69f1", "comment": "Malware payload", "value": "e33512d2691c91c1902992813f66840a23c8f8b0382ae8583b15a52353a0af49", "object_relation": "sha256", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582428, "uuid": "892bd57b-20d8-4ae0-9b4d-1932bfaff549", "value": "T165D53319F2987BE7CBBA331C98CB805A43D78891EF66FD0B190465854532BD1DCF78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582428, "uuid": "6bb1df0f-12f7-4f9d-a826-f53aafb8772f", "value": "49152:Z4MgkY06hGshRapyOGg4/y2VerLHjCSCSrbLG3bvd8vGPkkUzpFPRkwjr4t/yDgN:2zkYxGsypy/P/pWb/CSHCbO+4FP1jMtP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582428, "uuid": "b0a1458f-e3ed-4651-8e66-794bebec3ecf", "value": 2746856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582428, "uuid": "72b89000-9a6f-458d-ad74-d71265cfea06", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6aa13db-a278-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1731582562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582562, "uuid": "329b4c76-6779-40e2-acf4-65a2c1e780a4", "comment": "Malware payload (Socks5Systemz)", "value": "bbef55f0306c1126f3caa7c1390ade27", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582562, "uuid": "1961434d-b5e8-4d11-a234-3f60a96554e7", "comment": "Malware payload (Socks5Systemz)", "value": "08ea6cc38bef956b8db26cdcafad4a72d8fb956ed352ac706f225efc22f60b49", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582562, "uuid": "bda29c6d-a077-4ee1-b6b9-cc05c3f59339", "value": "T15F562227B258753FC4AE67350673A01058FBE7A9E417BE1273E4C88CCF624C50E7AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582562, "uuid": "256caac4-4149-44da-a8c7-3a220d142c14", "value": "eb5bc6ff6263b364dfbfb78bdb48ed59", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582562, "uuid": "2db7c0d6-6b01-4cd0-b4a7-c465965cbbbf", "value": "98304:PX4MX7RjenHhxAb2YN6r9MNA95lr6/WBEE2TowvQg/x0DUaQs6Juyazx1x:vOBxAbp6r9MN0ra8qxKQs6JuyaF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731582562, "uuid": "b69f8391-638c-48e5-898c-71d4478473cd", "value": 6096301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582562, "uuid": "bfcab99f-4684-48fe-9511-8e897a349cb4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ac6b69e-a27a-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731583213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583213, "uuid": "9144041d-dfe0-4e3b-ac92-2a0a75cdbc7c", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "742ad3fc5e84d4a5852fa2d1f601a03c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583213, "uuid": "a87d9d46-3bac-47ca-946a-e90512d6e28d", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "4694ccaa40d7885c841dde71cb7bade03e7dad9d2a0b6798c664a3a2300a1954", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583213, "uuid": "482b0f80-287b-4840-b8d0-1d3657858b62", "value": "T1E4C4D09276F1E915F7B78B314E3AD2E42A7FB8A26E74935E11345E1F08312E1C9237", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583213, "uuid": "31ec9039-5551-4254-9b54-f46482792945", "value": "bf3895393a18f28e9144fee3520d09d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583213, "uuid": "abdbd3bb-7ae8-4535-a27a-f5a855be0b81", "value": "12288:siwan6pzgZ5aV1eFrCA6IM/d/KEXhif/dvm2sejx:sba6p8UM1KHNKcifdmP2x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583213, "uuid": "9044c931-49a4-40d4-9052-963e283e676e", "value": 571392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583213, "uuid": "54e53d3b-6082-4634-b086-9c8102f166cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e950b980-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "2736f72e-b0c8-4c23-8076-d453c3eed339", "comment": "Malware payload (Mirai)", "value": "097662b833d15637611aae832479b49c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "6788b354-a374-441a-84aa-22a39720495c", "comment": "Malware payload (Mirai)", "value": "ce45c8c0279d45fa31942252fdafcdc93fb6f38d042a825cab271580a20a7b25", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "f522c5d2-8e31-4e96-935c-e0d303104c4c", "value": "T11DE30A46F8814B12D5C111BAFE1E528E37131BB8E2DF72029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "c5dfd431-3db4-4dd5-a0f9-1b83e9d13682", "value": "3072:yneaYC/gUau4JQXkDHTz9ai5oudNV0/4fLz:KevC/gNBQXeHTpaVC0/4fLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "240bc105-3da5-4721-b62f-2fa2c6008f4d", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "170ddb69-7cd9-44e0-aab8-e9bac8c2908a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e98dbe5d-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "d91b1315-8cd0-4542-ab57-fde572876388", "comment": "Malware payload (Mirai)", "value": "6e1f22c0ff3e57f06ec956aa5199c821", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "4d986b5f-377c-441e-acec-ab2b01c8eaa4", "comment": "Malware payload (Mirai)", "value": "0b7f6f6747e9130b6f6b24ac7bfe343bdef557928e879699b05b1f46a8516aba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "b0602d87-8e66-406f-8591-c48a99d4ad10", "value": "T12CC36CB3E8296F98C110E974F4B58FB92B93A58041872FB969B7C3740487D9DF540B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "1401f808-4da3-46d9-b26e-2db2bcc1cbe5", "value": "3072:f57apA7BSCmb8HWBvKcWipV7dmJjGyZv8Br:fkcmAWhsN9G/Br", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "9aff4f03-4bb6-4af8-8360-360c07273be0", "value": 122500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "f7db4c74-6111-4a89-a3ff-31948b8bf2a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e897b39d-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "39f24ca3-863f-420c-97c4-8796eb537ee2", "comment": "Malware payload (Mirai)", "value": "156e4e87fa0b551cbd3dd62990d92ec5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "75811fda-0245-4de4-8a45-b1669278dafe", "comment": "Malware payload (Mirai)", "value": "3298f53f376ba04db86670a6ea96373943eaafef89e6d1f1c5ef0aacc06588e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "51982ac0-f38f-4e62-803d-3b1b8308d9d4", "value": "T13DD32B06B31D0947D1632EB4363F2BE193EF9EC121E4F280655FBA8A91B1D321586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "72212a18-cb17-44e8-99c2-276f0658aafe", "value": "1536:dhXAc3w1i14kuXSqq4xIL2hbe4fo6XfbWOZMZjUh/oRRAdAWfC17CFvSn8zZNUW:ddAc32Vq4xo2hbnbjHttzv9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "b0f72711-fe7c-41a4-84c9-fa391b857db8", "value": 140412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "c4c2e659-a990-451b-84de-65511c275d35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d4aa101-a0ea-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "5a4382b3-c8b4-4cb6-a25c-95e3aa44f01d", "comment": "Malware payload (Mirai)", "value": "de62aadc45b2345f88ed7e7140b711a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "bd7c231b-9d52-41ec-8098-08e896f8c957", "comment": "Malware payload (Mirai)", "value": "b09e97ddca22eddb290146315c9255bee6153968d943959d6ad0742ab9590d1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "037cc78a-edb5-4dab-836b-b2298c547c6c", "value": "T188937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A32DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "b595e095-2d94-4e97-85fe-a5ffdaf10957", "value": "1536:W/QCZaxGdvts3i5JPhomAxPu++AjloUIKqI4FrS4LSk:WYCZa8dvm3oJPhbAxP5JlKKfUmDk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "3c43e0aa-c996-4bd1-a6a5-1e701c06ee6e", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "22a60c17-504f-415c-8ec6-1ee489eadaed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8815af8-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "4fa4d15a-159e-407f-9c05-9eaa093376b6", "comment": "Malware payload (Mirai)", "value": "9f56cd4a2b2e242e14bc11d7204e27c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "d484cb75-830f-48c8-b8bf-be02682fb16f", "comment": "Malware payload (Mirai)", "value": "64e0ac57dc97a5adc9f2fba96371c913edc9166037cf2a5c32fa97b6c0849f9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "7d760246-cd43-4759-95e6-6ebb46c3657b", "value": "T11004971A6A228F7DF6A8833047F74E20A76D23D617E1D640E1ACC6105F6539E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "49498575-5521-4c1b-8903-101fd3abb48e", "value": "1536:VL6wBKYCBQ7bwZ7ESm3c3XVzVl14bbe/upJymZQah3UjQu+snGIMR5eLDsIkuwDs:Vex0FSm7bLczhtMR2sNDmptQerAY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "fa0bdc08-b30c-4922-ac30-e0824f52a8b8", "value": 189596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "2f2d3a97-3c1a-4990-bc0c-15e1cdd71287", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e885baed-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "27e736ee-85ef-4cfb-9c7a-202f0009a059", "comment": "Malware payload (Mirai)", "value": "dbfc80145a6d02d82fe05c30a537f844", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "d9de3ace-0e76-46a5-8bbb-7dbf240f9659", "comment": "Malware payload (Mirai)", "value": "751bdf1ee6d819c3a5c1ebedff9529cecfda75f35c5c14019f8b89bdb0e7a9d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "3fac2853-4ad3-4ec3-bff4-062494514018", "value": "T1F3042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "ea148599-2938-4497-ab2a-a0f024d0d0c8", "value": "3072:OzeSvtfm84oALv2eEQakGzORuGMzw99LGd38YhTfYo+M/RM+FDhdLn:2eSvJkoA7TEQakGzORuBGLGd38+x+M/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "7f604793-3e72-412e-bbca-27f7bf336f14", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "56917ad0-8b53-4344-b0d1-518b17f4d9b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e948edea-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "e1e1ac8d-13f3-482f-a1e8-ee119847550c", "comment": "Malware payload (Mirai)", "value": "93195f36acba758732873638bf7a2320", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "d53f82e3-fcf6-499e-a9ec-f238a663e7d9", "comment": "Malware payload (Mirai)", "value": "477eabc25107219909b38f046072128761243789b3b3b8523e2f2b0b337ffcef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "98bd7b66-a040-4cc4-bfec-71c4d6702b48", "value": "T1FBD31855F8504F13C6C612BBFB5D428C372A17ECD2EA72039D216F61378A86B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "7bac2f37-1977-42fd-b9c9-c6b19012ba8e", "value": "3072:HkngPyku7YiQ3T02vfAdroIF8B9WDm0ijnrbzz:HuVku7FQbvIwB92m0izz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583929, "uuid": "46192911-c21d-4182-afb1-f9c19b5f0bb8", "value": 138280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583929, "uuid": "a8b020e0-52ac-433c-8e71-e620e2969912", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e94d70a3-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583930, "uuid": "5df36481-1029-4769-a52a-53640d5e2a4a", "comment": "Malware payload (Mirai)", "value": "738d90ec1b949d331354adc7452e2c88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583930, "uuid": "d22b3c16-a8d9-4ff7-825a-f839f941461e", "comment": "Malware payload (Mirai)", "value": "4d7981543a8bdbf7525bb501dd371ad1189fc2122c40f3b1d96872e53197e73e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583930, "uuid": "191f5c9f-cf57-4508-9007-68efa982cbef", "value": "T14A04EA19AF510FBBDC6FDD3702E8071139CC944722957B3A3678D928F94A54B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583930, "uuid": "1dd3b0bb-f065-4773-a19b-4d513cda249c", "value": "3072:6yod8IkgTqnqxQaMMDt4gyTJS7w3fjt+4:6H8I1xGMZMJS7w3fjt+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583930, "uuid": "a75b740c-08a9-457e-9b5d-7103e7e3afed", "value": 189596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583930, "uuid": "0fdc94dd-4901-407f-ba95-23ee8f6da304", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e94a1662-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583930, "uuid": "5a0e5968-888e-4999-a3a1-b2c8a53a02d5", "comment": "Malware payload (Mirai)", "value": "a3fb2cacaa1b153476f0bae105b58761", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583930, "uuid": "7b341486-fc9e-4b83-ab4e-1812b80c0406", "comment": "Malware payload (Mirai)", "value": "df3d56bbee10bd99582a859acf2b29f77aadd9dc52266dd2173f50ee7879cc62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583930, "uuid": "e11adeab-455f-4419-b36e-761c07c0e68a", "value": "T12C145C07B1C180FDC4DAC1745BDAF53BAD33B4AD1228F56B2BD46A225E69E304F1EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583930, "uuid": "fc89567f-6f02-4617-b50a-6603dda3f4d5", "value": "3072:ftuRMs5t1Y52arr8CyTvRRwNsntmnWgupyEFjDyVaPby:ARMs1Y52arr8CyTvk2Rby", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583930, "uuid": "ae882828-fe48-4712-a9f7-11598049fb03", "value": 190632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583930, "uuid": "13487d19-9b2b-4547-89ba-2f4df16cd6da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e93c18d5-a0e9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731583985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583985, "uuid": "e3b07110-75dd-4c0a-a698-a7714ba7a827", "comment": "Malware payload (Mirai)", "value": "2539965b411ae9b0727885782501da9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583985, "uuid": "f73694d4-cf7b-4e51-a88e-dbb4b104a561", "comment": "Malware payload (Mirai)", "value": "e1f012922771e8ec77298fbbc812f3fbe7e0c05b1e90ac8b2e31d1b4a07c3695", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583985, "uuid": "36905083-d046-4657-ad09-95c26c323db2", "value": "T136E329C7F900DEFAF80AE33648530905B630BBE115921B372257797BED3A1991973E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583985, "uuid": "4a7bb31f-93e4-4d95-9ea4-b827dd3857c5", "value": "3072:SmzTDH86J/78ryVVJjA1yGidugQ9miVvjbiaLDpeyUg0q7:S2TDH86JJPjA1y3dO9mwLAyUHq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731583985, "uuid": "d56848a7-baf7-4a31-8f59-ff10e05ca674", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583985, "uuid": "ac6d286c-0c38-4bb0-9929-f83fa44e44bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d17b74f-a27e-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731584774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584774, "uuid": "6c26a183-c9e9-41da-98a9-371ff8a6b4b0", "comment": "Malware payload (MeduzaStealer)", "value": "fd1b8111563b380cc32a3ded5cb18351", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584774, "uuid": "b52ac6af-c7cb-4bed-8867-5ece9a1d8421", "comment": "Malware payload (MeduzaStealer)", "value": "b174f3ba74f08dab33a60a99b4c6a1fa7d021a20b68283a15d82c84367c2c28d", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584774, "uuid": "fbaa21db-64a3-4cc3-9aaf-fa1fcc105d78", "value": "T145956C66994C12EAD87D9038CE9B4B13F27674444371D7EB1AD026A61FA37E02F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584774, "uuid": "a125d360-761d-4795-8160-6a25ab508c74", "value": "d18aa68269a30cd13693bec0b3505c6a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584774, "uuid": "d595cdae-8d6a-4855-a228-5aac9cd9069a", "value": "49152:bWluOKJkZt0J4Nsf0wZXeFCn4ELmCdcwV0mqsu2Qf5:b+ELDV0cuR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731584774, "uuid": "3c31100d-8c61-48a8-a8ec-1313d55fd07c", "value": 2045952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584774, "uuid": "b775c0d1-532f-4de9-8004-08e22f60d974", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40392e3b-a27f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731585289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585289, "uuid": "5ecd0827-5beb-40b8-a325-bdb126d721ac", "comment": "Malware payload", "value": "b9181140d916ddee3bc5c6cd60fff26d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585289, "uuid": "b39eb2a0-6590-4c35-8fd3-85a8478b229f", "comment": "Malware payload", "value": "fc79873aa946cd9a0c01b2ba54bc22dff1cdfb4f41728ea726ce3787bcdd984d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585289, "uuid": "2ce7d3aa-5e1d-4a0f-aa83-8600dd4e4911", "value": "T1B5E539D2A18969CFD48A17B68937CD82689D03B94F10C5C3982D7DBA7DA3ED026F7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585289, "uuid": "e8a741e1-e465-4e84-be96-cfe7625d574c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585289, "uuid": "719a1766-91a9-495a-87ea-18236d62298d", "value": "49152:0yxKxGAyt3Ok87BrFDj3mmVqwPld/3ugv3Yzbde:0yxKxG5t3Ok87BrFDj3mmVqgvYzbQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731585289, "uuid": "4bfb1d68-9c6e-49f0-809f-5da55cb56d50", "value": 3086336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585289, "uuid": "9820418e-6df7-415a-9dc4-2300be2c59eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e45b002-a27f-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731585339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585339, "uuid": "92648c73-2309-420c-8b2e-0efa8022553e", "comment": "Malware payload (CredentialFlusher)", "value": "de3117b8d8a755a64e56cd2cffdaa61e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585339, "uuid": "15859ea1-052e-4c60-bdd9-2df260366c2d", "comment": "Malware payload (CredentialFlusher)", "value": "befb712ab1c78e3de779c989ae7eb48495ccc4cfbad83c525b34e33dbde357c5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585339, "uuid": "111cbbb6-2f22-4934-9330-4f1aa008a2f8", "value": "T177159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585339, "uuid": "266f2af0-63c9-47f0-836e-dc2e05f5d26f", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585339, "uuid": "6d7cc90a-fff0-443c-8c53-aec69367a50d", "value": "12288:SqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TZ:SqDEvCTbMWu7rQYlBQcBiT6rprG8abZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731585339, "uuid": "b9cc70fd-8233-4a0d-bbef-d32cfc05cf6e", "value": 919552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585339, "uuid": "cf123103-b186-4985-84f0-9679764854e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca9c5e37-a27f-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731585521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585521, "uuid": "ef1f3467-9ee4-4228-a1f5-10473bcdd973", "comment": "Malware payload (MeduzaStealer)", "value": "8f794ac2e22c5f8396394fd6bdb2d25f", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585521, "uuid": "aaeab8b9-3d79-4d2a-8841-5c943d8e576f", "comment": "Malware payload (MeduzaStealer)", "value": "5c7f4086a64f90787ea13a00c4dc217d8ec6188abc24e4f2e841f7c805a8cca5", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585521, "uuid": "0c76ffa8-34c4-44ec-a702-d22f38ac0cd6", "value": "T1A5956C66994C12EAD87D9038CE9B4B13F27674444371D7EB1AD026A61FA37E02F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585521, "uuid": "42c3634e-2856-4159-b50a-5601d2ddb51a", "value": "d18aa68269a30cd13693bec0b3505c6a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585521, "uuid": "ccfe658e-d8c6-40af-975c-2fe049528672", "value": "49152:7WluOKJkZt0J4Nsf0wZXeF1n4ELmCdcwV0mqsu2+f5:7LELDV0cuH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731585521, "uuid": "168a1c90-a8a0-4739-8d4b-d8f8a9abeef3", "value": 2045952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585521, "uuid": "384e6b27-d939-4796-b221-9e853cb46018", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08a53b0-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731586086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586086, "uuid": "bd992f7b-8c1b-400c-ac91-c64bc238c013", "comment": "Malware payload (Mirai)", "value": "3c90d5820bddcf7c5d1bd21dfa49d958", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586086, "uuid": "caf17fbc-6933-4cc8-8331-3c0d1a1bc599", "comment": "Malware payload (Mirai)", "value": "bdebb67266d5f96b7d85cfb9644deee81161b54b60b0fded6cf36544a15fa9b2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586086, "uuid": "d3215633-4836-4d94-a987-bfb6ba3cef0d", "value": "T147E3A62E3E21BFBEE2A8873107F35FB083D5219736E19346E16CD6185EB528C185E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586086, "uuid": "8f60a0c8-b220-45ff-8b1d-592d418ae7c0", "value": "1536:mVqSjUF+uLHLVdiLzLsLzLsL7LeLGLXL0LLLkLhqqvZjptByZEGkbU+/pWacxZkI:tr9dy1B2gSpLg70mLjXswi5itRx2p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731586086, "uuid": "9612e377-418a-48ce-b2af-80f021da8ac1", "value": 155160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586086, "uuid": "cb7e95fb-1a6e-4292-89dd-effc5cc29657", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b082ba93-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731586087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "ba10a1ca-c0dd-457b-a19f-e4265abb58a1", "comment": "Malware payload (Mirai)", "value": "9438d9bc392bcf300a5583b6df5bc8f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#dbeb65", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "cd4026cc-4505-4bab-bc3c-5f9f43b6369a", "comment": "Malware payload (Mirai)", "value": "68e6282ed9046c9e22dbdf051dc03956803a46805f599e8cb9b52b993caa8f1e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#dbeb65", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586087, "uuid": "4782bd80-a5bf-4f04-acdb-dce4bbb36747", "value": "T148A34B47EA02C7F7D8831BF502AB976A0631B93A5A2E8E44F75C7CF8BB225C871143", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586087, "uuid": "92c421ed-2418-4de5-8f27-b2afc5d9ea60", "value": "3072:kFPlxndf22h/xwXnTkai7MYRApCg9dgdmk1b5wdL35sPX:kZlxndf8nTqtS/9dgdmk1b5wdj5sPX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731586087, "uuid": "174d0fc7-e059-4236-b64e-a482f728d8db", "value": 101654, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586087, "uuid": "1b98ee5f-3dd0-4926-83de-0e21d718a782", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2507a02-99e2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731586087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "a41d8769-059b-413f-87f3-396ffea735d6", "comment": "Malware payload", "value": "49f05359d208af71075f9c6effb7dddb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "cff64f96-50dc-45d9-ac8a-d7f9285abb0a", "comment": "Malware payload", "value": "bbafd119367a149bd1ca928e30cf8302b468eb23e8952af989fa64defb18c93f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586087, "uuid": "04bdadc5-63fc-43bc-8ad8-2ac59e3298b4", "value": "T176968C03FCA545A8C1EDD6308A629262BAB27C484B3127D33F50F7382F76BD46A797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586087, "uuid": "253a6292-cd73-4006-a0f8-241ba2fada54", "value": "98304:DMRdPJ/Vkuqb9ES1ATp8nNkXYKcBH/rpOC6mKlfNiBUNPH:qVkudNXY5BHFOrXfYIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731586087, "uuid": "bdf380b8-4b5b-4ba1-a8ed-2022368ee00b", "value": 9164716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586087, "uuid": "b7e34f54-f4c6-41c4-8957-65f24a3f6927", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1b819cb-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731586145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586145, "uuid": "e21c4dc5-8085-4b51-9592-b3b04e2981ee", "comment": "Malware payload (Mirai)", "value": "6c583043d91c55aa470c08c87058e917", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586145, "uuid": "940de088-48c2-42c8-bfce-e68e1429b059", "comment": "Malware payload (Mirai)", "value": "2d63c81a782853efe672a1d9cb00a339ec57207b4075754a1baf1df9af466948", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586145, "uuid": "3962ba21-dc96-4cad-b4f8-7f5937870f09", "value": "T1B5E3A51ABBA19FB7DC1BCD7706DA4601108CE44A52E96F6BB2B4C91CE38B94F04E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586145, "uuid": "6e30f368-47eb-4461-a5af-f936f74cabfc", "value": "3072:iDTElsfhWriM4eiANlb5calmCjXswi5itRx2p:Of4HZLNlbvmCjXswi5i3x2p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731586145, "uuid": "fa8a7ae8-f6f2-4137-bccc-5c78ccd7c7ea", "value": 155208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586145, "uuid": "5677e0a5-87c1-4230-b863-bbd733a9c478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e6f50a4-a283-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731587004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587004, "uuid": "80c9b2b5-ad44-4ba4-9e3a-f012971a5dfc", "comment": "Malware payload", "value": "2fed8f20236574222e2b4d0d93bd3ebe", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587004, "uuid": "913d7c67-5589-4db4-9448-23bb8be419f1", "comment": "Malware payload", "value": "1146bb1dbd752336addc5438019613e359778de6b3bb5268d20a30ce5565143b", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587004, "uuid": "316c2663-33c5-4c03-8742-f6a9749a95f3", "value": "T16434F172D5C968B8419DC1272103A315DF256EAEE4FB37C530EBCFAEB47893562489", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587004, "uuid": "c3e0c538-29fc-45e3-8b91-94d06dbf22c3", "value": "6144:RlyGLHt+QSL3zEo8GUPWgdattccD2ZU1aFRHHXmJvHg3hFQeOfG33:XPHt+DbzEo8NfwtcnRHHPLp6Gn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731587004, "uuid": "2f488e7f-6c5b-4dab-aa66-086a9f88d6f0", "value": 247887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587004, "uuid": "1f506a8b-57b5-4e51-a444-aa485c8e9de9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c7751ac-a284-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731587537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587537, "uuid": "f00be2b1-41da-4ce6-ae66-878079dc0dd3", "comment": "Malware payload", "value": "d7dcda3775b0b55f22c56cadb01c1af2", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587537, "uuid": "247b0c54-1d6d-4ec5-be24-f8783798722f", "comment": "Malware payload", "value": "ff03c0c0e7e3405c9bc00d2b1e595e93f12aa537bc76faba3827810d36e28d48", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587537, "uuid": "2a853c0a-6c79-4c47-aeeb-2a6c8dcea1bb", "value": "T18A24F1A24BB625F6473DD91ADDF8C408733DA220C1A8E372EB709CB567E161183AD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587537, "uuid": "72aab5d0-d331-442d-81f6-cd52242cdcd9", "value": "6144:Oe6JJBKLIwuKnXMjp6ZNF1K6m1nXLl2iI:OJKLIwuOXyKK66Lkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731587537, "uuid": "d09a7855-9450-47a1-902a-7821b4c8cb9f", "value": 213068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587537, "uuid": "a9e9c88d-7033-4010-8434-5802613c6ab3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "576611c7-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "165c0d84-7127-4869-b5df-c4d8e0625640", "comment": "Malware payload (Mirai)", "value": "a8b2c9fde63f4a8783cd790ddac2c750", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "fd195361-5729-4671-9044-ef18c9e5a793", "comment": "Malware payload (Mirai)", "value": "52b569ac51612f6be2d60c2658bf59c4789d654bf98d72c88ea4184df67ec9d1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "03232ea8-3ee5-4c02-9ffd-b4741c8d195a", "value": "T12D33F099F0924BBEF1ECDA367C2E7F0234A1C989E28501B7D98DB1992455B15CF1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "2a5ca0cf-0468-4ca4-9a9f-778fe7e616b6", "value": "1536:6ER5EdafhA+Aj4XCcYLPSob+29H2dp2nouy8DMPbq5/w/o:dRdSR4ScYLPSoi29xoutDMPbqK/o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588126, "uuid": "32c44c03-c8d1-4feb-9b7e-8229b8d6df81", "value": 52332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "f621caa6-19a3-46b8-b2d1-2ab767cabd99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12f6cdd4-9f7a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "85df4161-97bb-4e7d-a784-a99eefa4bce1", "comment": "Malware payload", "value": "a2bab1fead7d299c82493acf7dc267f0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "4e50482e-8128-4f51-8b7d-5f62674333db", "comment": "Malware payload", "value": "7d5d0777b8ead280d7a9bfee49526a55d7a3f8e9b2018c55a2953501c72e1882", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "d22d8c5a-4cb5-4950-ad50-787f7bd37799", "value": "T12E41E38B6062EF325DF09963366BEB943090919BD1CE5F1958FC79E940CCE85A3C4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "5f37a8b4-7010-4297-a37b-1c706b2979ad", "value": "48:v5u5EB5m5q5gJ5W5u5S5K565kL5N05vWfsx:v5u5y5m5q5C5W5u5S5K565kL5N05Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588126, "uuid": "5b99c62f-4137-4a1d-8214-f43b5c0c747d", "value": 2041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "e82afb44-3f0b-48dd-8661-6dd8b2cb4365", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77954dec-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "aeafc125-1d47-4cad-8696-0488bf1d6d00", "comment": "Malware payload (Mirai)", "value": "449c331ecadd298363f64bd0396195d1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "c59ad985-c78d-4db0-b7bb-d161211ae078", "comment": "Malware payload (Mirai)", "value": "af099c3d07015fcd6fdb96debf54aa1d6a4f6bc29923f961697aa62c2d2002ee", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "d1d9876e-c113-4836-8101-604f8b333549", "value": "T11A73026456E6BCD4C121352B9ABE5307ED8B6B74D0DF315A113AC0A4F89058EEFFA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "2f9e1a9a-c48d-49ba-b763-7a9a9173b36e", "value": "1536:BFg8Ee1MCNmyr8EHO1HItwvLTPv8NJ6xpmfGK6hLajBz3Ei:zg86VM8jotwvL4gmntjlEi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588126, "uuid": "d930ac0c-c905-498b-b101-e736d048c4d6", "value": 75780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "d98ed992-735b-4bdf-bc10-0270c3046668", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d082430-69d6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "49fe3d3f-034e-4798-8cba-67b2426f647b", "comment": "Malware payload", "value": "d38e8407bbc72cbd2057efdd3d8b7a05", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588126, "uuid": "b370b3d8-8259-4fa4-823a-4f2a61d2d4dd", "comment": "Malware payload", "value": "ea83411bd7b6e5a7364f7b8b9018f0f17f7084aeb58a47736dd80c99cfeac7f1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "d2eb3dc8-cdeb-4e36-937b-17797b61991e", "value": "T166414FEBD0514E7D7FA0B86332E9880074E495E649DE9F7B98EC38E5418CD8CA1C1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "f81d2c1f-99c2-4cb0-ace1-fb87a66cedc8", "value": "48:v5i525c35q57HKhdJ525435e5Q557sysRswss57I32YL57a46ok5R:v5i525c35q57HKhr525W5e5Q5571ofBx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588126, "uuid": "c98e71b9-8524-4606-892c-060aabc10548", "value": 1997, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588126, "uuid": "f7183660-8570-4ee0-807a-0917f0ba235e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56b1f42d-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "7dc7398d-fa29-493b-9c3c-02e2c150506f", "comment": "Malware payload (Mirai)", "value": "a6dd045b422fc992e44bfd9beb987c2e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "36cb0eaf-ab8b-424b-830e-c693e7362d11", "comment": "Malware payload (Mirai)", "value": "571c4c8b8456197267483f9cfbcd941db9ba9f00b4a92b9c2e1857a5ce5fa21c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "166e2524-bc39-495c-bb11-3a50f0465e80", "value": "T1F253022E4161EF6EE6CE043329A180175649DBF2E3FB2D3645406B745DC322BB3B25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "1c49a501-26d0-41a3-9df0-0b5685744eb4", "value": "1536:jSW1me2ybO5nqEMovf6ie6WlfaxnAmmwY6y6:jt1N2SMXrLmX8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "d01dcbf1-41fd-4407-b67b-43540f7fe883", "value": 61080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "e756c67c-1cee-4dbb-ab6e-863e31c70250", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "128f110f-9f7a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "b9e46e3e-a2c3-40fd-a8b4-8e6115654d23", "comment": "Malware payload", "value": "05b8cca5a6dea7b5e5b7f02fc28b8957", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "217fb410-aadc-42e9-b835-8d9f0a696d94", "comment": "Malware payload", "value": "7ba32665f61e0960b73d4cc5df94e5ff04ad9e3b95326233a8923946036eb07d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "4540a012-5921-4eec-96c3-5db1bae5dd0e", "value": "T14F313CE95462A9916DC01CE8E17BABE0EDD650C70C02070F15FBFE596486C4BCC77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "e09dc49e-31b3-4a77-8268-843e1c1dd870", "value": "24:sTseK7UoGe0Na9iD7beCJwPPw8CMFwMzPwjCpwvPwcCCwePwjpCawWPwiNEf7wPG:sT7Zk0JD4tSJn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "1410c90a-b7fa-47d1-b938-b935eed310d5", "value": 1842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "aa35cbd0-c3cb-4d7d-92b9-8a43445e147d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbb26f06-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "58f6dee0-9644-4638-892b-3ae7abb1e5cf", "comment": "Malware payload (Mirai)", "value": "d038242ffcd343d20be90ee78a017176", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "e53e1076-efa2-4293-ae8e-9b77601b261b", "comment": "Malware payload (Mirai)", "value": "dd4bf9bff3d4e8a37ddf0a48e03685614318d77076640db6f7af9bc3b90e881b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "b281261b-011a-4173-ad7d-30c9131967e1", "value": "T1C904A52A7E21BFBEE26886310BF35F70839921D326E18346E27CD7585E7128D185F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "4d941e88-6617-4e72-8423-2116109a020e", "value": "3072:PJ6tFx1BpaoZtuXhYyt8f9OHg+g0P0wSVuvGFHgSLER9JteI:g/x1BE0yKf9O7ePuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "f55a2ad1-990f-41c5-bc20-3825009be994", "value": 188400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "d9e2f946-dbdc-4c64-8e13-433f0d6ddbdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbbd493c-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "28f7bbb5-9002-47e5-a567-a541e9bc0cee", "comment": "Malware payload (Mirai)", "value": "3c75d57917387d4a04a36689e441222a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "9841ffd5-d1cb-42ab-a2e4-24acb562a7d0", "comment": "Malware payload (Mirai)", "value": "659b6ea113da714e9c0ca1ef47dba12b9abab0cdd8a1916a8d446c40d6c80e5f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "043e3d66-8fd1-47ac-9ee3-fd68c1d5dbc5", "value": "T101F32A05D9509737C2E327FBFB9A928E33271BA4938B332549286FB42B8179D5E3D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "43d3ba79-782a-4057-b301-4ddf5fc01828", "value": "3072:/AW+1ji/bdZZAV8JLAphBa8UfEu6W4lrOE4PFG9y1En7H6FKtf7lZalLjv57myXO:zAp3aHfEcuOtGL7aFKQlR7myX98RZoCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "54ac7c71-9d81-4ab6-a915-1c65189dd0d6", "value": 168407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "fb631c5e-fca2-4ad3-87f4-35c321ebcb4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbbed1ee-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "60021396-172a-4ce5-8d78-e80b56f2e8f3", "comment": "Malware payload (Mirai)", "value": "57254ce11e77b312a08e03346a9e8d06", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "ec9c3103-2094-4741-94df-b176140cfe51", "comment": "Malware payload (Mirai)", "value": "915eef47dc65c08679a26506eb895c6cf72ff1bdab029e878129723103f3fb5c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "dff90dff-eb40-44f5-a7ad-4a963c160b26", "value": "T16FC34BC3E780D6B3D08309F603A79B2502B1E9371A1BCE95F35C3CB59A19585F6266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "3a90c74f-dc32-4309-b1fe-15f5dee42630", "value": "3072:NdUumLWxh+ZBCVMwEXOTI7x9uddux2v69ny6JP/KTiFi:Nd7zhxlq0I7x+uwv69ny6JHKTiFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "7fc4ea83-6f91-4125-a2e5-bd6b8473686a", "value": 122651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "fd95c3fc-8a38-407f-b9c6-c17cc59ba164", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbd1fc31-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "b1339d93-e1ef-4db8-a58b-c697469007d9", "comment": "Malware payload (Mirai)", "value": "9f4121483f921eaf45aaed296e8300c0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "8be9c085-0edb-4d14-a131-ee2b4230f2f0", "comment": "Malware payload (Mirai)", "value": "e74be20fd36ad64c5be41f2b32ccc67cdde425e4ae073db1e8d2a018aae36807", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "a6859f46-191b-4290-bff3-598ce22e5755", "value": "T14CE33AC2FD00DE76F40A967645D74B29B270AB624F531672631B39AADE372C0382BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "a99148b1-3337-4220-9238-a3fbb8542178", "value": "3072:7+abos+ejy8TNWyM3RyljuU91CSW22NH6vvKWnDf49/1TpPI:fbos+L8gyMByljuOj24vvKWnDf4J1Tpw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "c459e0b4-00ab-4a4e-8e9b-8737958067d0", "value": 148384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "c64682ea-78e3-4820-bc26-7273e63c6a7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "569c48c7-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "4ad4b26f-4875-4c7b-ad10-744ec81bca6f", "comment": "Malware payload (Mirai)", "value": "6439104bfdb93a4fb435f69ee95713d4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "86f82d60-1999-4f6b-a0b7-e444de572416", "comment": "Malware payload (Mirai)", "value": "c7be8d1b8948e1cb095d46376ced64367718ed2d9270c2fc99c7052a9d1ffed7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "538a9ff4-ff33-4997-87c4-0100ea1ff2e9", "value": "T1ACE34CC2FD00DE76F41A967245D74B29B270AB624F531672631B39AADE372C0782BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "d39d5a72-21e5-4fb2-9940-c91e4b3588a5", "value": "3072:hs+Sb0s9twf3eRTSOyATl6R8uoApESy22RdvKWnDf49/1TpPI:ob0s9twWRXyAZ6R8unp2RdvKWnDf4J1G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588127, "uuid": "de56ebc1-ddb6-4264-b915-3fe51f02a092", "value": 148395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588127, "uuid": "732844e0-e535-4dee-9850-406965923fed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc656c7f-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "48a92505-f546-473f-abf7-ff1bdd1817ad", "comment": "Malware payload", "value": "f62d316f5465dfce4285ba5802b03fba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "0d272a7c-440d-47ed-909d-ee6706209543", "comment": "Malware payload", "value": "e24268ce65e59276e9add74a73b6e0c87d89493f0a20c78fef1dd6df9cbb494f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588128, "uuid": "51c7e202-bf63-4037-9ffa-64bdca72b856", "value": "T1064110ABD195CE7CBF90BD1336E9840071E499AA48DEAF3798EC34E4818CD4C24C59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588128, "uuid": "20c32355-5a2f-4263-881c-a63e0cc1ce32", "value": "48:vQUy3IhHKhdJUm3Ei5hsysRswsshI32YLha46okf:vQUy3IhHKhrU0Ei5h1ofBhI32YLha46t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588128, "uuid": "b227fd52-2609-46a5-a24a-c18b18060309", "value": 1945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588128, "uuid": "5a32fa78-da14-40cf-9f47-fdab1fef9032", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "567376f3-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "8a2a521e-7c29-47bc-90e7-6f20e1605e81", "comment": "Malware payload (Mirai)", "value": "38f57e4bd12414546998ebd2792cdaf1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "6ff1f8fe-074c-4e8b-8c5f-c411a14d8a29", "comment": "Malware payload (Mirai)", "value": "21f882b2285b055ecbe65ff0a4366bba9be87a0fc939d5895f90d7124f86ebcf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588128, "uuid": "910df010-027e-4bd8-92da-b7a457a95a9d", "value": "T1FE43F11EC90ABA89C69E0C7991165ED7D201B007920CAB9EB370BB00D27B90F7E690", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588128, "uuid": "8cf88964-bfbc-444b-b99d-0891144a16c5", "value": "1536:jlG2eBZWnMpRNpMTYoMT2KU41WIR54Q/5ppgMGkfSTVQyHNs:jlocnM/kg1W4d5pm1Oyts", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588128, "uuid": "d8d4809f-4aac-4b51-8a58-d5f3176e38ad", "value": 57276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588128, "uuid": "31e557d4-5ef3-487b-b34c-355dec1ae488", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5651a9a0-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "097fec84-b789-4f3a-a675-354b6a5f10f4", "comment": "Malware payload (Mirai)", "value": "3196ad1903e27c80bafc0cca931e2fe2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "4167b3b5-a7c1-434f-97fa-e7e27ad67171", "comment": "Malware payload (Mirai)", "value": "27cfeea4c2cc96636789ebc6e60816d863e183bee61363961509f19d60b8d1fc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "b29dde47-d3e8-4737-83ad-d8b306fddeab", "value": "T1BAE34949FC54973BC2E23BFBF79A43CE372A4754979733115A296EB02BC17881E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "f2fe11fd-6331-442e-af6e-2d428bf6d365", "value": "3072:tr9AQ0npBQNSgfJ7ORxDZPusw5Fg7rTNoyJklNjerRQ4hW8BCTN6CvnGr0fYpHJR:trriPuPFcvNUlNjerXCvnGr0fYZJDRyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "34fbcdde-ecb1-4bd0-9e16-68c8c8901afc", "value": 157240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "9ddb0c32-e9ce-4ee9-84a4-2fc640e8cd6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "566b3028-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "a58080c9-c77e-42f4-8c9e-257e0a8051f1", "comment": "Malware payload (Mirai)", "value": "61e7d18a4efdd3273fe436a0d66da732", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "39676beb-958d-4e3c-a163-c91a43fa36d5", "comment": "Malware payload (Mirai)", "value": "8349ba17f028b6a17aaa09cd17f1107409611a0734e06e6047ccc33e8ff669b0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "77e77f52-2667-48c3-860f-05304f16c479", "value": "T11EE32944FC54573BC2E23BFBF79A82CE372A566497D733115A295FB02BC1B891E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "35803b5c-47b7-49ec-ae45-f5ccd2c3e0a7", "value": "3072:jQ9hU7npBQNSgfJ7ORYI2/6wdr59N0RsKDyJoNsw+eA7Qcw2JQAPOxvYlqijhH/w:jQMm/6q5zwsKdNUeYsvYlqijhfuD36I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "d7a88d14-91cc-4c48-965c-3590229f2c81", "value": 150678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "71963217-90aa-43eb-907f-4969071ccce3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "564037e1-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "1bb828e7-6a3c-46d4-99b8-34a159b66a77", "comment": "Malware payload (Mirai)", "value": "cff313365a8c2d4a4983d78b29d3fb2c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "db0fa4b8db0333367e9bda3ab68b8042", "colour": "#b5855d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "5aaaeca0-be4b-400a-baf9-2c8bcac594d7", "comment": "Malware payload (Mirai)", "value": "6e3ef9404817e168c974000205b27723bc93abd7fbf0581c16bb5d2e1c5c6e4a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "db0fa4b8db0333367e9bda3ab68b8042", "colour": "#b5855d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "0a54d1fc-4ddb-4d2e-8964-d031e05b8512", "value": "T19C04A51ABBA19EB7DC6FCD3302EA4601108D954A06D92F6F72B4C65CE78B94F09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "ebc48735-f6a9-43ab-a84d-eeabe77479db", "value": "3072:IAzrHfQV8Z+B8cvytaX+5mYkuvGFHgSLER9JteI:9bQVSA9bXJtuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "6ec6b087-ed8a-49fc-a99f-e5878b222a8c", "value": 188399, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "747fc0e6-e738-4afc-9a59-85dee4aa764e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5724da77-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "2e8474ef-c689-4e8e-bc1b-a2ba557dbd19", "comment": "Malware payload (Mirai)", "value": "317c6607f69f134df511fc2aa5cb9e39", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "1ce14307-57eb-44e3-a411-e68ac237d578", "comment": "Malware payload (Mirai)", "value": "b4834e08961f418e0b154719397b734e0e221d3ee85e9e3604454b36537cbc51", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "c3e8be6d-0bf9-4d2a-9078-53eb5288e3d4", "value": "T17C33F130A4149709D0FF2DB38FD8E7F56A900B671AEAEED603C81F9134127661A509", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "f563beed-c888-4390-a616-440695e019ff", "value": "1536:90LwuFW47q8H95brB5c4u+qgw0razwNxW:98wzVS9lBC4u+qgwbzuW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "40d0af2b-1426-4e54-aa0c-67edcaff8783", "value": 51936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "d4c33891-a5f3-4034-be72-1734297089db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56804327-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "847f2c31-b5e7-45b3-bfa9-b186826d8ded", "comment": "Malware payload (Mirai)", "value": "4f972bcb14039a4fad62686929df5f9b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "8d7d0110-b16d-476d-82e1-21fb4df3184c", "comment": "Malware payload (Mirai)", "value": "540c00e6c0b53332128b605b0d5e0926db0560a541bb13448d094764844763df", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "bddd89f6-e607-419b-9e91-09e9536f2ef9", "value": "T1D5E3293B27231E33C1D1287102E70331B6BAD795387A57DBB9C06DAC2F1AA8435567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "9a02d3f4-436c-43b8-bf8f-4127ec0feb2f", "value": "3072:+vyACgrxxXx9D+4pgBTY9T73Jyl3OGvOWfDl49/1TZGI:+qLqrx9a4OKTTGOGvOWfDl4J1TZGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "546a2d90-c385-4a51-9c15-2ea4c381964c", "value": 155274, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "e91f8f85-9f15-4693-b835-6d048d4aeb99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57160867-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "c7d09890-9504-4933-bf61-b7e9e43d7bb6", "comment": "Malware payload (Mirai)", "value": "2e0c1e7827791f1a6e5952deacd5944f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "4e88cc5a-2ddf-4c3a-b923-e526e4b3dc5d", "comment": "Malware payload (Mirai)", "value": "80414d2fb7ea7cb1505ee378f43879ef0b6752144f1a1f0c5704d2e19079ec08", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "35bc09e4-3f41-4d13-8861-3ceb22e554f5", "value": "T13E43021652FBA4F6C11445F5A53D45C86282DC934E500E8718DA10EFEAFBA83AE227", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "478fa0bb-3d31-48cc-bee2-9c3241c1c06e", "value": "768:XRXJ3vIpBNeZCP5M5aMYdpbYfeCMdJXynp/+YNkTvEFv9bGntbqXlzfp:hZ3vIbP/3dpN5Byp/XkDEFvx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "83b7a317-3f27-4fab-a604-0d567e441522", "value": 56840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "18af8e4b-aaec-4f41-8e6f-4f062eeaf746", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dee1d66c-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dac51d5e-542a-4c46-9d5e-09af43f04cfc", "comment": "Malware payload (Mirai)", "value": "3704e4ffe854faceac7691847833a60f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "a4cf0c48-de07-4da7-b4e1-8c8f03e40ae1", "comment": "Malware payload (Mirai)", "value": "57845a6cb39b3c23a7e199475cf7f8e770a33eb48eeabe8280afa598478fe1a2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "12f04f9f-68c0-4907-8628-e1229aa8794a", "value": "T1F1E33949FC54973BC2E23BFBF79A82CE372A47549797331159296FB02BC17891E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "34cb7a67-700a-4b6f-a771-013904bef089", "value": "3072:5Z98vvnpBQNSgfJ7ORJhOXKQUBBc33bxuyJRNtelUsyEm2w4y1sp6vnGr0fYpHJR:5ZIkXKPBcrx7NteKBvnGr0fYZJDRyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "72cb51e3-6a68-4aa7-8235-17391bff9d8b", "value": 157233, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "be207f77-40f5-4eef-ae1f-77fdfb2cacca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dee9657f-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "6bc16b98-fe7f-4eec-be28-a78ea99691c9", "comment": "Malware payload (Mirai)", "value": "a152e9637875ed4e297bc483c4614b17", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "defb90dd-0090-4960-8f0d-0e56723417e5", "comment": "Malware payload (Mirai)", "value": "e6d9c5937ff4e76e55e2a41a56bc488e310ee3d883f44f3f4edceb0d880d73d4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "f5856914-e918-419c-9859-3dc286c701dd", "value": "T1B0243B09DA509767C1E32BFBF79B828A33234B54A7D7331949285BF03BC2B9D5E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "0d0021e6-e13c-4821-9785-e62b7ad5efa0", "value": "6144:tR80aKVT4JIPc44dv319wTPiMDt+M/9/mr2nBPNg2:n80aKVKIPc44dP7wrigP/9mr2nBPNg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "619d464e-054b-4fbb-b2c6-dcac116ed151", "value": 211857, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "42bbe388-c30a-4435-a37c-8815eb74ed3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "627f6594-9f78-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "a12fb0be-f2f2-4e79-93f5-f9914b032767", "comment": "Malware payload", "value": "95e32499ca55ca40bb89473e491e2d53", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "1839c1fb-322d-4c3e-b693-d686d77c6619", "comment": "Malware payload", "value": "4bfa9a5ef8659393e185b0d0c2a16640b9082275db73ff575d98c5212dfd1d7b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "4d8e3ebf-654e-406c-bcae-0f2058f1fba9", "value": "T1054155EBD0A54EBEBF50B45332D9840472E4A4AA48DDDF77A8DD34E4418CE4C6CC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "866e20ee-4e95-4b11-b7e5-d51650fbe65a", "value": "48:v/bv3vmHKhdJbT3TB5msysRswssmI32YLma46oko:v/bv3vmHKhrbbTB5m1ofBmI32YLma46u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "7a0452d4-ae85-4fdd-846f-8c71d2e523f1", "value": 1958, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "48096074-b016-4503-834f-16da3040b9cc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56c55386-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "b1eb8b85-1183-41cc-b7c5-bbfbdbaf5cba", "comment": "Malware payload (Mirai)", "value": "cccd69fac91b6f43a67920e4295d0a97", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "13caf231-9e43-404e-806b-7f69b96d954a", "comment": "Malware payload (Mirai)", "value": "7d17800118eb9c9d811ef9cc42985382581291eabc3d0a01ab56fb28bbb6dd81", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "22e7a499-0687-4619-9363-535efe22d938", "value": "T14E33E02660209248F32673BE985BFB9D28592315E0A090FD4BEA20A39AF2E903DD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "39460fb7-ebe7-47cd-bae4-07151b4b6ff7", "value": "1536:bq7hxL+UuWf2GM43sr861jj/h/2Nznouy8DM5/f9cF3:bSyUf2K3sr1j8LoutDMZfE3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "76cbeab0-1ccc-4eb9-bea3-1e14b77fd487", "value": 51800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "13e7c134-59f9-4384-941e-8c698e0a75e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "defa2854-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "a673f071-5bce-4441-a7a4-15dae51734c9", "comment": "Malware payload (Mirai)", "value": "2b1ae32bf6a884b55388d69bd65a1150", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "2b728b51-ab5d-426c-af9b-8aa7244818a1", "comment": "Malware payload (Mirai)", "value": "fb89492ba1e0a7950722ec1c472adbb9a51e7ceeccbe8900f367c4d61f0ed7b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "8a8b43c2-1032-4528-afb9-19c36936ebb8", "value": "T122E32944FC54577BC2E23BFBF79A82CE372A5664979733215A291EF02BC1B8D1D291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "fcda8e76-82c0-4d65-9293-688f62b0ae88", "value": "3072:xlL9dUznpBQNSgfJ7ORPbq/eEJj9BaCQRjayJ2NQeAWUgLULT9L8vYlqijhH/uD3:LLo4/eq9QC8jsNQeyIvYlqijhfuD36I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "0ba715aa-293c-461c-b1d3-9bc5f3b162f4", "value": 150671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "c1b1b95e-2453-464c-8d03-505414a3c374", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "defcc5f6-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "16b53488-8d01-405c-86c7-bbd5759674e2", "comment": "Malware payload (Mirai)", "value": "e69349b396fcb5b20dc3b1f9bb682d21", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "795d7766-0d64-4980-82bb-f6ba66c0ee6e", "comment": "Malware payload (Mirai)", "value": "81f62aa9207925ce1d374e5ad5745307ddbf0fb15f9745306b382538085da731", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "7d71f669-9f2f-4b6b-9b03-f2aae2e18fbf", "value": "T193E33A3B67231E33C1D1287102E70331BABAD759387957DBB9C06D6C2F1AA843516B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "cea0efb5-47b7-411e-b5ed-b0ab0fb2b7e5", "value": "3072:efhrAURSHBrD/YJkRJY9Q5TylXnVyGvOWfDl49/1TZGI:eNFWBr7YAKAUnkGvOWfDl4J1TZGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "19537953-46ad-4f97-a565-5cd3642e6593", "value": 155259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "fa923fe9-526c-476a-a679-0771625e61a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df0826cd-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "48ee9c97-5951-4964-b19b-626e260c505a", "comment": "Malware payload (Mirai)", "value": "b917582a696c53c30d042cc11c05a938", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "af54a131-4388-457c-87d0-2686492c3d45", "comment": "Malware payload (Mirai)", "value": "11c5dead4abba30328a81747b3e73b8346e57408ac70026327d0508a57815216", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "5ebe9f3a-0eeb-4658-b756-a92dbb24aa4a", "value": "T14304A51ABB619EB7DC6FCD3302EA4602108C954A06D96F6B73B4C65CE78B94F09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "75868e7e-b307-486b-ba39-2b9f824c5fa5", "value": "3072:adjenfJF9QOx8chytaH+/7uvGFHgSLER9JteI:mgJFmgdpHsuvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "e7dd0726-5208-4f0d-b0b1-bba6348283f4", "value": 188400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "6e1cc726-bd11-4949-90a8-b88f6b586c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df179030-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "c287d0b5-7093-4629-97a5-19463915f3d4", "comment": "Malware payload (Mirai)", "value": "cf6a80e3f6b37e624603451565037b85", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "fc6fea9d-b73e-40f8-b34a-b8be658e1d9c", "comment": "Malware payload (Mirai)", "value": "7d08ccab0f7c2122887ab62048bbaa247b08883d0f0870931d33b15f6f2e3dcb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "2ae368b9-f039-4a45-9089-ca8d26292913", "value": "T109C33BC7E747C7F3D4430EB607A7A66D4621F8268D1A8F99F31C3DB49B12D84B2192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "e41d5fb2-2506-4d05-a142-8a493ea5694f", "value": "3072:kZoUN5/hP59jAU+LKeWgh0uKdZwYnv69ny6JP/KTiFi:kpzhP59lHxgh8Zwsv69ny6JHKTiFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "caf65f00-b22b-4cd9-8b10-55499d618be3", "value": 123099, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "ba1ecede-1f58-4360-98e5-7f990388c666", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df22cbfb-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "ad7d003e-2961-4498-90ed-f9401b53ce5c", "comment": "Malware payload", "value": "4f08de38d6c347b62928dd5a82f786f6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "c31b50d1-583b-40ce-b50a-b4a971fd4b07", "comment": "Malware payload", "value": "c986c921784bee60928087356dde310e708cb37e8e8e39788d8bac4e0841d694", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "de39fd40-33c8-426b-b117-09e9b52981dc", "value": "T1E4414DFBE0914E7DBE50B85732E9950071E8E9AB48DE9F3B98DC34E5418CD4C28C5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "12f71a6c-2df4-4c3d-80ff-c55a07705679", "value": "48:vJ153poHKhdJF13Ff5osysRswssoI32YLoa46oka:vJ153poHKhrF1Ff5o1ofBoI32YLoa46I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588132, "uuid": "0540f077-e26c-4f04-9272-e5f34def67cb", "value": 1945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588132, "uuid": "144612af-cda3-4406-87d3-4bdd47024277", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56477161-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "a91d9094-d224-4715-bd4d-092af230fe11", "comment": "Malware payload (Mirai)", "value": "ccb876a2a7dfc45c128a6865abbbcca8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "b4eb3805-c72b-4a66-a9b9-531e10814e5b", "comment": "Malware payload (Mirai)", "value": "dfc40e5219e741e592c065922bb6d76e027add6948617a9a30f6d01550a8aff3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588133, "uuid": "2ddfbf75-2355-4d33-8d6f-51402025e475", "value": "T13843026E5D077C1FC81F617D219017DA7BE104B27182F757206A8ECB9B8E86162532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588133, "uuid": "8667ef40-864c-4a57-a9af-3aec0996d726", "value": "1536:mIQ9ceLSEcHLxKXQyHYPiXsPffYNV1czFKY:mIILUH9f+wRP3YNV1AFKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588133, "uuid": "d381cd1f-d2d7-4450-9daf-5e420a1f6f91", "value": 56560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588133, "uuid": "bc1189c8-507f-47d9-9949-daf10e5ad6e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfb3f67f-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "a3efec3c-779c-4b9d-bbf8-81d3db7d2cf4", "comment": "Malware payload (Mirai)", "value": "d037d76d9f26782a5c134abee5ea852f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "ea758432-cf2e-48ea-8556-3e4d96ded4a3", "comment": "Malware payload (Mirai)", "value": "190439d778addd47dc61ef93d5d56f64265f049a4a4e5099fc438113661343e2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588133, "uuid": "5a31a537-aaef-4458-b71f-451b8b5ce848", "value": "T1B9E35B9B6B0D1767C1BB1AF12DB723F08BADF9A1115221C4A40DFFD01372A70661AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588133, "uuid": "0f51171b-eff5-441a-82dc-2e9c55d42f36", "value": "3072:5WR9mp6gxRxQkykhmcmtZPyYHr15ThOInvvWnDf4urTpzI:5O9eJxQk3hZQrjnvvWnDf4urTpzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588133, "uuid": "b9906ca8-a9fb-447e-8866-b41eaf6f914f", "value": 143369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588133, "uuid": "c88f39c0-5c30-48a0-baa4-89387e541535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5761f62f-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "bc12e157-e837-49c6-ba8e-40270ea04baf", "comment": "Malware payload", "value": "a35745ba8372f9ef409d42d21da1e53c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "c828bd17-050c-4ca9-8b84-c7890dca4f16", "comment": "Malware payload", "value": "c30331d664a928fb71145f0a2494df3c45cd44c2ae1827ad56886a05f4dd4ebc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "614c787a-b04e-4cea-8fb8-a25687d51b74", "value": "T1893274426F12CF53E56366FC2BF30AB41A14FCBB4D671281B52CFEE95A421C4312AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "69e49a58-986a-46cc-86eb-49ed3c578c4a", "value": "96:f9ie3eGeQe5eSneyAwRJDhnHQEVgQYNhmC5lel7ykJpYplH7O15hFQWSrDIxE2vi:fsVQmCGlmkJpYL7AhMDIS2vPhzxf2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588185, "uuid": "a46f55e6-3a29-427d-b5d4-71c7e07f3b3c", "value": 11644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "ce98d3a7-da99-4d3e-8134-3f550bdae132", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcd6fa6a-152e-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "6799197f-42d6-433b-a0fc-4f05a6969770", "comment": "Malware payload", "value": "eb3443fba8f65495e62ee6758fcd1e10", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "ac931112-de9d-4a5c-8290-33dce95c83a8", "comment": "Malware payload", "value": "72f016860bc576d262148e4652eabef3c281ed300fb88e2a9231d42c6834348a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "ae798640-b4f0-48cd-8f2f-4a9ae774dbf7", "value": "T1EFE0925993E83D12E62827791A0303224330F825836A0F4713041112AC0E3E11C6E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "9a8cd3cf-4f9c-4eb9-8bb0-f0ef79173d89", "value": "3:Bkkk/tllsZl/4t0nlsllllUlsllT/WppX+ltllHqCKl+lE8l8RPlslultXllOl:Btk/tEHlM/8s/6ppKcCKlanK4luy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588185, "uuid": "5c483f6a-c2b6-427b-8a0a-25f99fc7994d", "value": 296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "5fd28759-ad87-4e38-8890-e1e107a9ad86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "573a3ec3-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "140c4d79-f34d-4ac9-bf71-fb2234294630", "comment": "Malware payload", "value": "47dacca2abf97012142f7608a099b602", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "a9db17eb-fcec-4a41-bbd6-84a019969253", "comment": "Malware payload", "value": "79ecbf9677b2623197dcc787c2fa7b0d3c2a9a641391469014389672b7ee4ec0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "223459f2-7ae7-48c5-9832-c2ce1da5cf89", "value": "T168D0928AA3015982CB6833FD544203292331E820C3B78B038B45611A5D032893D555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "35684e9e-f58f-40bf-b327-e29cb4ccdeb9", "value": "3:Bknkl//hlM/lBlltT0nl/k1EqlntrU/1llFqWp0lvr/lxXXllblldl4ttOn:BBQ8l/8I/qW+hXCtE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588185, "uuid": "58d3ab9a-3fc5-4356-9def-d0f22af673c7", "value": 288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "1dd5203c-44b2-4f3c-a147-7192cdb23644", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5656acb1-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "82d74a78-fbbe-4b0a-bba5-1f5dfa682998", "comment": "Malware payload", "value": "3c4e51060a23e7c803a69102ab8a098e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "53be8c4f-a121-4060-8a4b-be64a4a6f80f", "comment": "Malware payload", "value": "6246120192cf0a363ec82bdb617a8adcfce42a60a5ab856b3122eb4385ddf973", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "0b554b9c-1c1f-4481-a6ba-48a0eb3d08bd", "value": "T1EC52CC036B02CF13E16326FC27F30AB46A10BCBB4D6756C1B46DFEE55A421C4352AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "5cec88ca-e39f-4e14-a4de-a8b7a096f73c", "value": "384:b6M3/fO+Zvo+e+E+MQmBlGkJpYL7EMDIS2vpzRJ:TXZBPlMQUlicvl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588185, "uuid": "de543f11-a857-452f-b447-b0bafc1b5c6c", "value": 14032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "13eab383-3764-4ed3-8f55-1d1bca8a323f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ea2c952-9299-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "33d67608-fab3-42ff-b61f-6fd3e7c56f7e", "comment": "Malware payload (Mirai)", "value": "fa8bae6bbcf9a658fa25b7f2a4faaf04", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "df8bf0ee-5b36-439a-b9f1-8e21bb47ec46", "comment": "Malware payload (Mirai)", "value": "1007f5613a91a5d4170f28e24bfa704c8a63d95a2b4d033ff2bff7e2fe3dcffe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "a3f4d7f1-c4b1-4cae-abb0-bb07385e0901", "value": "T1A9243B09DA509B67C1E23BFBF79B828A33234B54A7D7331945285BF03BC2B5D5E261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "543ed197-82a0-4582-b718-e48fc2d0b80f", "value": "6144:AhYGa/AaqzosIYPikWmWlnRiDDt+M/9Zmr2nBPNg2:aYGa/KzosI+iNflRiNP/zmr2nBPNg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588185, "uuid": "aea76949-5af8-428f-a6d9-5d94107dfbab", "value": 212217, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588185, "uuid": "00b86bf2-359a-4a8a-b3b6-1b8e539e2557", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47b5067f-8e0a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588186, "uuid": "40d7dfd2-007e-444e-90d0-cb0b8e416e75", "comment": "Malware payload (Mirai)", "value": "983c5d72544a32a574f5e914253a618b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588186, "uuid": "5aa9df56-efbc-4477-b742-db0266da1cbd", "comment": "Malware payload (Mirai)", "value": "fc4a02d90a8b9efeb4dfba835d514b728399bc8424253341a30e13b40cb15373", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588186, "uuid": "a85c1f8b-d2c3-484b-a33f-4eb0bb442fd4", "value": "T12404A42E7E21BFBEE26886310BF35F70839921D326E19342E27CDA585E7128D185F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588186, "uuid": "70d071f0-a273-4a2b-91b8-568795d83dfd", "value": "3072:gbQew39VNNs4SCP/edPnih/AutrHbuvGFHgSLER9JteI:C5c9VzJRoPni647uvGFHgSLEXJteI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588186, "uuid": "357983fe-867d-45b0-be16-72b75a5a5832", "value": 187408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588186, "uuid": "79a08b24-fe2a-4a98-a985-d777431ec125", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "574baa94-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731588186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588186, "uuid": "59449bbc-2e11-4408-81e3-b425451017fb", "comment": "Malware payload (Mirai)", "value": "de0f5a7725ab51649f6e2f650fae6234", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588186, "uuid": "903b3601-76b5-4013-857d-813d4eb29fb6", "comment": "Malware payload (Mirai)", "value": "b3ad8409d82500e790e6599337abe4d6edf5bd4c6737f8357d19edd82c88b064", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588186, "uuid": "00ba0226-fab3-4da8-82db-4eeba75deebe", "value": "T123F32A05D9509737C1E327FBFB9A928E33271BA4A78B33255A286FB41B8179D1E3D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588186, "uuid": "bb79cf93-9849-4c1e-8b9f-1c3871ea00f8", "value": "3072:fAW+1ji/bdZZAi09LpVhVa0Efki5OMlHOE4PN2by1ER7T3sHzzbHYELeKFAu2S5Q:YpV7a/fk5GOl2j7T3sHzzbHYELeKz59y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588186, "uuid": "60295e8c-864a-44ba-be38-c0b2ec38f59e", "value": 168414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588186, "uuid": "744706a8-73fd-4b50-a47a-cebe5879a235", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "565c5cd1-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "b7d0c0ae-1b64-456d-bf04-00efb415b6eb", "comment": "Malware payload", "value": "e6992c30b1e8c22ef60e79a85e8079a7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "dd62ed96-2a63-4535-b1a9-6ccb1d988a63", "comment": "Malware payload", "value": "7e8021d6c291c150437322b98cc65ed6453b6da1392bf0856b3c7b7ec9a9ecf1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "0cc16546-7b4d-415b-8ccf-b1890755b6ac", "value": "T1E712C546AE56DF67C66722FC2BF34A241A15BC7F0C622681B53CFCD95B520C4702AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "e975badb-0931-4090-a9d1-9f28cb225148", "value": "96:f895GzNDPWcK60UskJpYplmbO15hFh+SBDI5E2vZhu1VmzorEczxqwp/6:fuGXK60UskJpYabAhRDIK2vO11zxq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588187, "uuid": "2e272cbc-a496-4fbd-a0df-3b3a28a0dc2b", "value": 9271, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "76194cae-9a7b-44fb-934a-f551e03d4935", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56f4f90a-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "43f26246-15cb-46ec-a9ce-6495ceae9b36", "comment": "Malware payload", "value": "d654c3ae9722761ac337ea3f1512efde", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "e86a3ad3-bfa8-49a5-b22b-eea24f53ffbe", "comment": "Malware payload", "value": "e8322ec6ce7bbada95d94bc40a094284292492a541ff0e968e9232e77ad7dc9b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "ee0760ca-22a2-45d9-a7fa-fe56fe7f5b57", "value": "T15802E6227BAAAF57C66BB1F54AE3CA241A91FC3A8C722191F434BFC967021C478517", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "d9157ec7-4382-4c81-a3c1-b424dab3c286", "value": "96:Bu1PM91wEkJpYpld7O15hFQWSCDIxE2vZhRVYzzoOOzxfwp/6:Bu1U97kJpY57AhNDIS2vxFzxf7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588187, "uuid": "8d249c78-0527-4d5e-aca0-169eca99de45", "value": 8803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "94ec6a26-9085-42a1-80fd-f5f0179f0feb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "574cab7c-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "9d8d462c-a223-42c3-8f95-f068cf590a94", "comment": "Malware payload", "value": "b92aca6c65022ed3ecdc7ee4e254a1a1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "45ee685b-22c1-468a-b7fc-4144b51d9979", "comment": "Malware payload", "value": "4fcbf1aa7a253997a4ca6e067b1e9bb1cf809204ba5575f5ac665f82d06ab04b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "9356a366-055a-4e2d-aa67-a0220dfb90cd", "value": "T1FFC2516A8756CE47C02732B047F7CB715B10FDA26F26954B9074FFE52A421D07A82B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "a4a1ad09-d07c-4ff8-aff9-4a9abf3e2310", "value": "768:VFg5DIki9PkpU2J7Q+zw/90zV8UnD/61:VilIzPkpUaFzw/9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588187, "uuid": "afdc33d0-66bd-4059-bb8b-78e5883a3ef4", "value": 27025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588187, "uuid": "9b32c254-0728-41e9-ac0f-810c28786efc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "776fdf40-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588244, "uuid": "5630a72f-21e3-4312-8863-f802b6dcdd13", "comment": "Malware payload", "value": "3b20268666668cbd55cc4d665e7c6915", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588244, "uuid": "0c2ced80-fc57-47d6-8750-7308ff896f0e", "comment": "Malware payload", "value": "b8b384e853b526dd9460bc5b686b7ec1e85a17dc0be36726e347c7d85daeb001", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588244, "uuid": "13fd46f0-dd46-4e85-8613-b2801fbb0307", "value": "T1EC51125DD3887871C6282936400757211334C94289989757A75C394E1D562CC1E79F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588244, "uuid": "5802fc1d-8a27-430e-b60d-1274d9d94dc0", "value": "6:Btk/tKjKK8YSJqppKsCKlfPIs/Mn0/H0UlX+lqvw+:Br1z0+P1/MnU1aqvw+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588244, "uuid": "51ffff55-71b2-470f-b913-6cc3f7a86ed2", "value": 2752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588244, "uuid": "e964aef5-c09b-43f1-92b2-44b9b5d22748", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbda529e-152e-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588244, "uuid": "4decb3b7-12fb-43db-9db0-7aedc10b5e88", "comment": "Malware payload", "value": "1d0e78da717c8039d14e4ae253b4820d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588244, "uuid": "bbb479aa-c510-4302-aabe-4830fc649602", "comment": "Malware payload", "value": "e892ceba823a555dd296920b32166836e3783223d3d7e182563283a18f4c7b68", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588244, "uuid": "81e01309-6444-4a71-81ac-a41ecdab31f2", "value": "T1AEE08CE693CC2D62CE24133DA04307200B21E81692A2AB17134585125C073B51CACA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588244, "uuid": "ef28a9da-767e-4338-ae75-2a70b8bd03a7", "value": "3:Bkkk/tnlklhlRt1lvpDFth1tl1l1R/Xl04/X+ltllvlmildqCKlQ9RcHol8lE8lr:Btk/t+l51o4/KBlxkCKlQKIqn6ylEvy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588244, "uuid": "c160bfcf-ece9-4705-8e59-d1d04f456722", "value": 368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588244, "uuid": "87bd1b3a-6288-43d8-bfe1-375ca4951ab3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57286793-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588306, "uuid": "c2c9401e-75d6-43c3-8156-01dd0445e99d", "comment": "Malware payload", "value": "39463ea53a5c190ae0fe009aa3721131", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588306, "uuid": "577d839d-9b75-4422-827b-61a2430f8c63", "comment": "Malware payload", "value": "5c68346ace720a1bfde39b69257ad64e744726d54667b54c1d1385d799f84d18", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588306, "uuid": "7585689c-f86e-4d25-9a84-5a0cbb210f55", "value": "T1DF12E8227B6BAF53C56BB1F95AE3CA340A81FC3A8C722591F434BEC567060C478517", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588306, "uuid": "dab86e66-b780-4940-81f1-1416ff97139b", "value": "96:NXQhf0nUVvG6kJpYplmbO15hFQWSCDIxE2vZhu7RYzzoOOzxfwp/6:NAhsgfkJpYabAhNDIS2vO7Zzxf7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588306, "uuid": "05d3855e-0640-4f12-bbdd-d2d57481a2ff", "value": 9316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588306, "uuid": "87bd7fff-f37a-4f66-92e1-6dcaef3b2904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57551e05-9c6b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731588306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588306, "uuid": "94f9dd06-ff11-4898-ad5c-4d346bb17c6d", "comment": "Malware payload", "value": "061f8825656641cf62c5ca373acd09aa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588306, "uuid": "aa1831ba-6c48-4b1c-a16b-4eaf215de7b7", "comment": "Malware payload", "value": "da72f35db75f10f40db54c9caeb5ded0e47d097d6412a8500a1439bb9ecd6477", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588306, "uuid": "424cecb4-11c5-43aa-a738-8a2d3e1c3488", "value": "T1ED51125ED34CF7B6E22C2139410F47196320F58155BC1B5B53DC505B5C4165E3D9A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588306, "uuid": "bea58610-f75f-4f66-b0a3-c60ad0ad5953", "value": "6:BB0ersXmk/8yCKlfPIs/acWf2gslVlXa/qvYK:BBlsXt/2+P1/axhsl/ayvN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731588306, "uuid": "22e84c38-f445-4f5b-a031-969478174475", "value": 2752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588306, "uuid": "f0d77318-b525-4769-a780-4a9f91f6da12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83d1dc1e-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731589268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589268, "uuid": "e79a3255-b794-48aa-8ef1-c6bac48a020f", "comment": "Malware payload", "value": "d169ea494801647ab6e6d5331d530b1e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589268, "uuid": "5df83ea0-dec3-44cf-bec3-5a73fb61b43d", "comment": "Malware payload", "value": "84ab8051600d066947808edc6ba69479d74241e8ac55edd73ab68a79d3706fd1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589268, "uuid": "d8285625-a128-4bc9-be66-cb71fb352439", "value": "T13272781B6651CE3AC458A3340EDF8A346176F0F1BB725127264066B53CC2B94DF3AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589268, "uuid": "b5acb5e5-d7c1-4853-8cd5-303b27ed653e", "value": "192:R5+ZtdGw2GEkYKR82Xhj9w6h/Nr/MTLqYw5oEotZWl2vac6vi:TYd6GEkYr2Xhj9w6h/Nr/WXwOlWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731589268, "uuid": "e4c77afa-3b05-4bbf-bd7e-52d2e2523f1f", "value": 17024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589268, "uuid": "44f70390-bd83-4a66-8605-10646037a7ff", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3553c509-a289-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731589566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589566, "uuid": "df7942b7-846b-404a-a110-3466a8439acc", "comment": "Malware payload (Mirai)", "value": "6ec690b690c491571c2eda464faecf48", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589566, "uuid": "a5a3bd11-6029-4e67-8312-4f2c036ba025", "comment": "Malware payload (Mirai)", "value": "ea25e3df53a5845cc0beba877d4c4a849b67d3796029c3b28ca7155ea8a76174", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589566, "uuid": "5ffa0a18-ef80-4c66-98c3-183326cc283c", "value": "T120D34A13B5D2CDFFC0A696F50BDBE2659863F4390B36215733A47DA92F0E9891D2E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589566, "uuid": "d167ad1d-335f-4777-aa3c-481ba8c5cd02", "value": "3072:dVX3r85JBCbWyBa8Ju4Gk2LM3hU37+xMDVQdkv1FjP3+9/NJMHI:DX3rpNd2wPMDVRv1FjP3+JNJMHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731589566, "uuid": "a4afedc1-16b1-4412-a58f-c1141cd9d832", "value": 142865, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589566, "uuid": "a264089c-2584-40e3-a4e6-bbadf63f1976", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5204f967-9cc4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731589625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589625, "uuid": "7d3fe6b3-4889-4f4d-88cc-729d157c0203", "comment": "Malware payload (Mirai)", "value": "c0a45453b6d9d258e56e7d997f3e87d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589625, "uuid": "0f5dd795-7241-404a-b278-8aa802a1717b", "comment": "Malware payload (Mirai)", "value": "b74dbd02b7ebb51700f3c5900283e46570fe497f9b415d25a029623118073519", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589625, "uuid": "a83c410a-df18-498a-91e1-6f542b99fcd1", "value": "T1C4D34B13B5D2CDFFC0A296F50BDB92659863F43A0B36215723A47DA92F1E9C91D2E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589625, "uuid": "2435c5f4-4246-4100-90da-4256f53d4ecc", "value": "3072:FlX3si5JBCbWaKS8Ju4Gk2LM3hUd7KxMoAKv1FjP3+9/NJMHI:bX3sHwd2wRMsv1FjP3+JNJMHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731589625, "uuid": "de6d7a0a-4796-4e38-a88d-1e2bc3b5565c", "value": 142864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589625, "uuid": "940b0bc5-d964-439d-897a-cda44b109b62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449d013f-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731589863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589863, "uuid": "d2917fd6-bc84-445c-abc3-234056d6559f", "comment": "Malware payload", "value": "454c9bf6bdfaf41e58406b098e236dc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589863, "uuid": "58a0914f-3a35-4097-9515-863a8cfddf24", "comment": "Malware payload", "value": "c0b1ac2a4e9df27794b10c8738057ba5476357bd5129bee50a2a1ab9f8183853", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589863, "uuid": "b6e9305c-4a4d-4b42-a0b8-d8e56a93501f", "value": "EB531202339A297192714AF1E7FDBB48E64E3D588FF16C246C113D68F93239D5CC8909", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589863, "uuid": "b5c47a6b-32f4-4deb-bc05-0f7d7024f53b", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxI:yYI0ARqw1qAEv7UIFM8oJorFquyj9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731589863, "uuid": "14ea40be-4542-4fa1-ab69-94eb25d0ef5b", "value": 66608, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a821283-a28a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1731589950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589950, "uuid": "f2a7051c-bbd1-479a-8943-4d28744099e9", "comment": "Malware payload (Socks5Systemz)", "value": "7e8708d602d46128b1073de97ad7c003", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589950, "uuid": "2dafa692-b04f-4dde-afad-439a4d942228", "comment": "Malware payload (Socks5Systemz)", "value": "880bc54e97d0de313019f1a277ed77ce1b58ce32aad3623dea3c334bc9108301", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589950, "uuid": "6b14e71d-6ec9-4b5c-8f54-ab5f55aa0014", "value": "T12D56232B7298753ED4AE67354673A11068FBA6BDF413BE1663F4C48CCF260C11E3A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589950, "uuid": "b32c1532-973b-4671-95b3-776a3298da35", "value": "eb5bc6ff6263b364dfbfb78bdb48ed59", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589950, "uuid": "43ef2018-1c92-47e7-8aac-881460195834", "value": "98304:PX4ZTSTh/pKRW/4kMk08LMGZeFS6fCkheKkEqA6mUzxJj3Q6dRKVryWyazx1e:v6TSppAkJhZYFSRvKGlmGjgURYLyaS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731589950, "uuid": "a68393ca-af7e-4961-92f6-0b6201b67ebc", "value": 6120544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589950, "uuid": "057aa5d6-ba0d-4a0d-8271-7098defd3c02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "176e0184-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731590319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590319, "uuid": "6ad75339-a3fc-4dcd-9602-00e006866970", "comment": "Malware payload", "value": "356bf51b47509625d44a85cb30400349", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590319, "uuid": "2b8945d2-ffe6-4b11-8aa5-72e434b5fa20", "comment": "Malware payload", "value": "83f1cc08c430107e70a2976aef153eb5e8f25fecc561f4a55d226158c080ace9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590319, "uuid": "7ed5e976-f2dc-48a2-8484-71408976f200", "value": "CA33024623A63AB6957188F1A7F8FF49F14A3DA89FF51C157C217A58A83236C28C4D1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590319, "uuid": "e80ee84b-dd1b-43c2-bc9c-5e0bf6165d2b", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfA:yYI0ARqw1qAEv7UIFM8oJorFquyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731590319, "uuid": "7eb0a537-2e9d-4034-a92e-cebbf353c88e", "value": 55024, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f73a37ec-a28a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731590320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590320, "uuid": "95fb9994-8522-452e-b453-c4922c31eaf8", "comment": "Malware payload", "value": "1bfb0088f6447db354fc9f6faf999263", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590320, "uuid": "e2ad7394-76b8-4a71-87d7-c17771eaea5b", "comment": "Malware payload", "value": "788aab2ac3f49074ec55fd226831da82d911f1151b5ef0ce8b2f7daceaae308e", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590320, "uuid": "be491082-dd80-4f62-a043-a0d5222bec86", "value": "T1C416330D3D653111CBE97C3B23671BAE2B52806A38AFC7068FAA91944CC7B556F33D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590320, "uuid": "bb97392b-5e7d-48eb-be75-bfac27fb792f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590320, "uuid": "ee065970-04aa-46be-b4e1-032f6a9e3e49", "value": "98304:MxGR8wOgjs8qExm63CUi5aDkow/pQcVPcX59MSa:M0R8wOBaHw/pQcVe59MS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731590320, "uuid": "0f19632d-978c-4f2f-99f0-4aa34b8b37e9", "value": 4396544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590320, "uuid": "4ae26110-3cd8-4a51-8478-2b80e989a633", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e46dd62-a28b-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731590493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590493, "uuid": "dc567950-5a71-4764-a726-ee8a60c25fa4", "comment": "Malware payload (MeduzaStealer)", "value": "8ab660199d2e890e3c81e99470b0c240", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590493, "uuid": "c3e2382a-375a-4b7b-a2af-a7335200ee4a", "comment": "Malware payload (MeduzaStealer)", "value": "322608e24d59934b175fe0f128fc70112b69ac82ed25deb794c98f19af3204f4", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590493, "uuid": "eb6a6901-e9c1-4bd2-8da6-5708df1ada74", "value": "T138956C66994C12EAD87D9038CE9B4B13F27674444371D7EB1AD026A61FA37E02F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590493, "uuid": "3a7e5a61-7ed1-44a8-a364-5674b0f1b21e", "value": "d18aa68269a30cd13693bec0b3505c6a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590493, "uuid": "b85e7e15-23bb-41ff-b4bc-0f6174fd96dd", "value": "49152:KWluOKJkZt0J4Nsf0wZXeFEn4ELmCdcwV0mqsu2Xf5:K0ELDV0cuW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731590493, "uuid": "c469d18e-9a9d-4ade-97f8-1f119361db87", "value": 2045952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590493, "uuid": "e9ef2919-3711-4d9a-b0e1-cc741d77601d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f71a455e-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1731594186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "5d483774-801a-486a-aa87-b8d71964a860", "comment": "Malware payload (Meterpreter)", "value": "9bb361a91dcf38dcd8b47688751573a1", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "2f0a251f-bf70-45a6-bce1-209dda0c76bd", "comment": "Malware payload (Meterpreter)", "value": "53d14c8a75a4cd060df6afb0ba309de18a22ed68ad010de78aee9ecc865f59b3", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "2b59cd48-87df-4448-bab6-96fa7e572ffe", "value": "T1D7128416F75B24FAED3A85BA0947BA0EB755F12423126FCB8B0510472E22CD5BC79B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "12cd775e-478a-4c5e-b124-b3df7912db4d", "value": "57d6e7112c8e716cfe2eb0ff9f36763c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "6fa952d3-bf97-4321-b180-1db51cf8f3da", "value": "48:q0r+l6O5aXyn/hNhx4/jC/V/FUP3cKLiXklHdb0E:dX0RFZkd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731594186, "uuid": "73861983-73d6-4554-901b-0e70be756c1c", "value": 9216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "4e5b1575-aced-41fa-b3ea-c88288b51fff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f71b4a37-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731594186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "b2680c34-4b08-43a3-9744-fae8ad8fc485", "comment": "Malware payload", "value": "deb1acf5a892a9f86db120c1a3d37486", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "3b04601e-507d-4352-8d1a-0dfe87c35b71", "comment": "Malware payload", "value": "f1798af2719fb473e219cdfc2cd5b46ec39aa606d092fc85d108cd19269fd437", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "68597f72-08cc-4798-add4-d5b069aa54ac", "value": "T13B018872025228CE57B19093874A425DFFCE63EF99351043AF0D3EC0DCD9A81A83E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "7eaf2da6-cffc-4990-a438-31a75a2cbee1", "value": "12:CzWCMhuvGsxD6ANTJzFraRKJFtHv7nn+b3dtK2HkjbL+9NNl+QAKM:CzyuvTIANTJzxaRwLn+Td5yLmvM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731594186, "uuid": "645a3237-3cab-4510-ace8-c18f09074fb6", "value": 685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "b2abe136-fa00-458b-a885-d6c0008d63dc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f72016d7-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1731594186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "953120f8-d678-49ec-b74c-11ed995f4272", "comment": "Malware payload (Meterpreter)", "value": "0e0503501bc82e5e4c185af848e1cdf0", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "37434777-86ff-4ac6-ad2c-2e7dc60f9dc1", "comment": "Malware payload (Meterpreter)", "value": "27c80ef034bd4fa9fe831f2079d9b904c91340bb1e0842c75150d63cf3d162bf", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "5c731a6b-e70e-48b7-9515-8a18ff03b839", "value": "T19712C639B1B50CF7D83416FA8107054AB71CB724135542E74B4364167C64EE7BA369", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "4c674c4f-6819-41cc-a62f-a1401a89b067", "value": "57d6e7112c8e716cfe2eb0ff9f36763c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "ac512a27-f530-4b52-a3ae-45379ac02ee1", "value": "48:q0kV3zU9G4aNVh7XphlhEF57/ncCYxZrCO1LapHvfbOE:vDIKkfB0v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731594186, "uuid": "51c35652-418d-4665-b3b4-795eff73f569", "value": 9216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "561ca2df-b922-45eb-af7b-5598e26a1600", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f73393f9-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1731594186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "f4d5291c-299f-4249-bba2-e2fb1c46cf9e", "comment": "Malware payload (Meterpreter)", "value": "07fe3351ece1aea6a11b969e2435179c", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "720b41b4-c67d-45cf-a50a-0772483b70f4", "comment": "Malware payload (Meterpreter)", "value": "4f40d400e330d4b482cf6f082f88a8e12284cc3c92b245d0edf35d0aec62c0d7", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "c7ea6eea-e77d-474f-80b0-44152f85467e", "value": "T12A73AE82D9C85832C2A6127D5775367469B4E4F73205D2DA398CCEE5DFC28B0962A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "2e853020-f3b6-47e1-ac1f-e54c9a09e13b", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "771c4da3-56d3-402c-963a-40e26fd515bd", "value": "1536:Iny62N4Tfx+RJ/wlFEi5RmKMb+KR0Nc8QsJq39:S2yqJ/wluiaKe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731594186, "uuid": "63a7e200-3fec-4c9a-b291-90c5e378e68a", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594186, "uuid": "7e9b19e4-f9cf-42b2-8a66-bc351dc2b3a9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acd2d5d1-a295-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731594920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594920, "uuid": "f8304de3-ca9b-459f-9c12-c8fdd03d1d07", "comment": "Malware payload (Mirai)", "value": "530a5304e7256d256700b548616850a1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594920, "uuid": "b0692d0d-ff38-41e4-a3ab-573251fdffe8", "comment": "Malware payload (Mirai)", "value": "38f87bfc7e5574b31afd056fcfdea9716165ddfbb9d533e996dbf24dbc998862", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594920, "uuid": "0c617080-92c0-4d99-b487-4ca883e98456", "value": "T1E763290369C0C1BED488C9749A6F903AD563F17D1339B68E2BD0BA367E46E211F5E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594920, "uuid": "ce691ee7-595e-42fc-8e77-3de2dd507203", "value": "1536:XVdKDYm7awu+ziiv3JWcrIdwIrgmysekB:XVdKDYm7jFiivBMdwtmV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731594920, "uuid": "ba510e8a-aae2-4069-9ce6-a12e41df2a04", "value": 71776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594920, "uuid": "a20d05c5-ae7d-4149-964f-04d93ba95510", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e5aa0ee-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595325, "uuid": "9528ef54-8b73-4969-965c-515f439c7b87", "comment": "Malware payload", "value": "9579af96367447427b315b21b8adde36", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595325, "uuid": "ca06fd65-1283-4afc-b402-2bc092261d48", "comment": "Malware payload", "value": "0e102ff9e7499b9f30e22129983c60b70f993058f4bbd6d7cc54799a66300205", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "10ad5b88-e248-4e03-bbf5-1c53973232a9", "value": "T11A524DA387682C05DC6B8F7039D0863AAE75B7879AD1C2D73158C2148F407827FF56", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "a0447e46-3887-44e8-94cc-a96891ceb4f0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "1c143bb4-084e-480f-9515-44541af34b65", "value": "192:IU4qRoHNyby2sE9jBF6IYiYF8pA5K+o5CdXOEqCb9VYoA:IHNyb8E9VF6IYinAM+oOlqCbz/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595325, "uuid": "bc65a1c2-f0bf-4b48-8e64-d8e2154e1813", "value": 13928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "e3d517d5-7585-4208-a42a-8043d9755cb1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e60927b-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595325, "uuid": "3250d0f1-6f19-4d14-8a73-f6b4125b07b1", "comment": "Malware payload", "value": "e24e7b0b9fd29358212660383ca9d95e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595325, "uuid": "4ffd086f-feec-46d3-a86d-9a3e9d893bfa", "comment": "Malware payload", "value": "1c6ed59c11a8dc5d058c71cfccbcfbdbaff75c67a3dc1c5395044ff92b0ddfa1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "009e5a01-a8a8-483e-a9b5-62d9c0e5d338", "value": "T136B1962287EC1777EC97477889B343526774E5209A275B4F1AA0D27E6C333688732B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "dc03920e-4465-4b6d-bf32-48e92c7f1626", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "ebf81af3-c61b-4c19-8eb1-9a2f629d95c9", "value": "48:6mhoxJU8h7jkH3lBS6F144FJgY7sgGn2S8xS78oJs5qnEOulKvDq:FoxJU8pkH3lBd43sQN8oW5Pcv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595325, "uuid": "6390ee04-04f0-42d6-a244-fd5c847129a0", "value": 5120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595325, "uuid": "92411303-724f-45dd-ac0c-ddba7806ab49", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2552b99-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595386, "uuid": "8428f4aa-13c0-4048-8a7c-2f45d8879411", "comment": "Malware payload", "value": "8ca7845e555675b9484e6dfea4f2445c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595386, "uuid": "e63bdc9c-17d3-4b19-a640-f0d6eb4df7a7", "comment": "Malware payload", "value": "2522d9ecb8b221dfc36a62255d68fc1ef758c436791358117615c20f29c4fe9a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595386, "uuid": "563cad97-33e3-447f-80dd-56b2ada87dd6", "value": "T161B1B66647EC03B3EC6747749DF313512774E4249A230B5F5EA0C17A6C633588B22B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595386, "uuid": "235b6663-b00a-49fe-bb0f-b31db583c2c8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595386, "uuid": "1a7c8aee-e132-4905-847a-2c65bc90d9dc", "value": "48:6SflIGJQJ8h7f7kTN4lIJxseGP44FJwTsgGn2S8xSrkoJs5qncuulEK+h3xq:dxJQJ85kTWlise249TQJkoW53uKk3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595386, "uuid": "f5775185-f40b-4356-b2b1-a3656bffb2a2", "value": 5120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595386, "uuid": "fb73e6db-8d0d-4cf6-93cc-155b684539de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "056af06b-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595498, "uuid": "05af52e6-2837-403c-8ea2-6329475ac02f", "comment": "Malware payload", "value": "b027562302e127e7ad3a61b89215342f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595498, "uuid": "fa63ec00-2639-47e2-ad80-a939a843815f", "comment": "Malware payload", "value": "a2f252a7cfb2fcf2d6de8c449c7c999db4dea992bb1b6eb7f2356a45aa6185cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595498, "uuid": "9ae9ff04-4306-4718-9006-9d449aca3be8", "value": "T18856339EE47CDE5F4B3B8275D5E0BBE46B401C030FC3A4B59410EE9062A1ECAA2756", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595498, "uuid": "48104be6-dc1e-4771-a049-e105232e73c2", "value": "98304:zmyZdxul4JmmY5a0b7dhdgciVPw11gdHJFVS6oK5iCGwJ1JP4vq3rs6g3jKLAIow:iyZDulOmmY5Z9h+P4kJO6oAiCGw/JCq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595498, "uuid": "2ba0801e-d7ec-4087-87db-637fd16f4fee", "value": 5954284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595498, "uuid": "c07e21de-e635-477e-bc87-9037a3db548d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f47b89d-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595542, "uuid": "f63932d6-d473-49ac-b6c1-80c31f0a64fa", "comment": "Malware payload", "value": "ffc43645009041ac33e5e2cffe558630", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595542, "uuid": "e6402345-2637-4600-ae74-64add46f83a5", "comment": "Malware payload", "value": "b337bdf938137f924c012750a78a873b5665ed42841921b22f47cf374e219da4", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595542, "uuid": "95808dbb-37d4-443c-bb09-1fc2099fb879", "value": "T115956C66994C12EAD87D9038CE9B4B13F27674444371D7EB1AD026A61FA37E02F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595542, "uuid": "4cd45732-3467-4fea-98c8-23d56fde57ef", "value": "d18aa68269a30cd13693bec0b3505c6a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595542, "uuid": "30c94591-d469-4f80-bdc2-741e5f028953", "value": "49152:aWluOKJkZt0J4Nsf0wZXeFen4ELmCdcwV0mqsu2sNf5:aGELDV0cuz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595542, "uuid": "166ba003-425a-4ab5-af7a-825188f165b8", "value": 2045952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595542, "uuid": "8b86b0c3-7863-42d1-911a-8375bd4323bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5411c31c-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595630, "uuid": "4c9ace90-a87f-4caf-a3bb-554b7e81d9c2", "comment": "Malware payload", "value": "2912cd42249241d0e1ef69bfe6513f49", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595630, "uuid": "f67fb74b-66ed-4439-bb73-bc5723872731", "comment": "Malware payload", "value": "968b7f6af70d85cf079621d8c4d54bb7385a584f2a3d3ef981610ae88cf939b0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595630, "uuid": "a452785f-021a-441a-b652-8f6c5f2351b0", "value": "T1D3A5BE22B783C073D9530571657A9B7F1939BE200B29D4E3E3D42E2A5DB02D25B3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595630, "uuid": "bbec3faa-6edb-470a-a106-d9bd99741423", "value": "f6b9c4c616eb15a7d41975bbd1dce6bc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595630, "uuid": "dcc02f9e-a4a4-496f-a089-c0b71c60d07a", "value": "49152:ZE1zpZW1D7w0brP6+pCixXvq1p/42mi080tULLd0:m1zaZJHP62C2OrQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595630, "uuid": "7c7eaee5-44ae-4484-9222-4690b33385ed", "value": 2243424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595630, "uuid": "ff5e1eaf-592f-444a-ba35-9e044e74e19b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "050e4ef5-a298-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595927, "uuid": "092fa2d4-909e-4fc6-b581-2d1adea90139", "comment": "Malware payload", "value": "36212c1fcc7acab0bcff59ddd90dea6c", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595927, "uuid": "2c4d1c4b-bbf2-4805-bca3-9d4964e36deb", "comment": "Malware payload", "value": "1a65d66bb98599559ca61084618f1406338883bab3095914355305fbfe1445de", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595927, "uuid": "659f9ded-f728-46ed-b739-e7485965b787", "value": "T1ED22EECE124411325830CE4A766A08D1A58C65856CDDDF3E88D939B9944EFFF34CBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595927, "uuid": "8c707638-4cca-4b03-892c-1a2241de381b", "value": "96:YNNZYUGOL3B353ij/1L04M2J2h2nq2UyFylyLueOUQ7QXQNWmGLQlQFQ3Qk7LKCe:fOsnIo+Oce+3Qk70tTIo+e+3QkG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595927, "uuid": "90405b8a-06d7-4172-8f43-55b88cea47bf", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595927, "uuid": "fa0422e4-cc46-4774-9ce9-2b5d8caa9931", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58189f86-a283-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731595940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595940, "uuid": "92278918-81fe-461b-b8aa-deb66a09ee95", "comment": "Malware payload", "value": "8016579398b13be903004ef083009490", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595940, "uuid": "d6fb1aa3-8ed6-4887-9370-c4a4faf6888e", "comment": "Malware payload", "value": "899f0ff816f47ad93fe2856f0a72a836c65bbd2d0381a71af39892b3b009d936", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595940, "uuid": "76bfe18d-c437-4042-a9ee-5b3fdc483194", "value": "T1FAD633F2A23969678EDE348973A50F41EB258B786601A142C07EE1EB7F037D487547", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595940, "uuid": "2802b4b0-71b6-4064-8024-97944d2faffc", "value": "393216:+BhdTcBhdTTkxDnl2Gp55cIi8fiL6yTu5MLvWIr9N:+WdkJxIIhfiGOmiRN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731595940, "uuid": "aafba041-cc96-4765-94f5-2f55e81ecdbf", "value": 13066965, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595940, "uuid": "ee342e12-70a3-486b-b7db-370d315aafe9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71be747d-a298-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731596109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596109, "uuid": "465a56dc-a378-43ab-9651-22592c453f39", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "08db1979ebff106d4406208c5b5438a6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596109, "uuid": "5d4e029d-4c20-440d-8218-b0260f4e7070", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "bdbcc879b6683419f87853f0c5a54d6dde3f86ac61dc55ab282e1bd7261abb60", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596109, "uuid": "950aaeb8-88c2-4bd9-9cee-174a663341c7", "value": "T11DC4E0227EF17911F7F78A714A7E86E42A3FB4725E29525D22341E1F24711F0CA627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596109, "uuid": "129ba835-9d35-4206-9540-b52fd648efda", "value": "bf3895393a18f28e9144fee3520d09d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596109, "uuid": "f6da87d9-6298-4d7b-a09e-bd8f73eac919", "value": "12288:fTGBkYjYGBxPIUKuMeXOQyyHGPPkOVPf6nusT/:f6BkRGBZIdutyDkON6n/T/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731596109, "uuid": "0622c8c4-70da-4ca2-b14c-591633b16603", "value": 585728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596109, "uuid": "468999b0-4897-40b4-89cd-e762abbe552c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00bb9e5d-a29a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731596779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596779, "uuid": "bcad3b55-da7a-41c3-a3b2-5c0ac7e2edc3", "comment": "Malware payload", "value": "cdf305f76ac250b2e136d9626a428866", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596779, "uuid": "7af30808-9770-4d1f-809c-2ef2f08671fd", "comment": "Malware payload", "value": "150fc07feeddbe9430c3cbca6bac3d39a7dcda942c596817c07d346f6dd22f29", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596779, "uuid": "26de3e3a-c710-4832-b372-48d639dc6fd0", "value": "T1CD227DDE03C429B4961149A5B76288C2B2CC47E7AC93DF59899938B5924FFCD7C73B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596779, "uuid": "a5e93734-ac72-4a75-8f6c-2ab9779d4198", "value": "96:jOKAoij/1tJhnq2uBhHk3rNWmG7xR3Qk7jY4pGh074KAoij/NJXJhnq2KDBhrqHA:jOLABhHh7xR3Qk780LBhTxR3QkF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731596779, "uuid": "675e4b85-c8c8-4f4c-bf78-b22e07169452", "value": 10746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596779, "uuid": "9168b016-4a8d-4f9e-aea5-663b8121b569", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e7ae93f-a29b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731597419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597419, "uuid": "ab265c22-460e-4e3a-ac1e-c84acaef2d94", "comment": "Malware payload (Stealc)", "value": "89e37b5068f392611c2b39e0f4d567e6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597419, "uuid": "4914e108-d1bf-49fb-8caa-bc6d7525452f", "comment": "Malware payload (Stealc)", "value": "09dda2baa592c7f2472c6d6b5f39fc67459069fbead396eef975814a00626a08", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597419, "uuid": "71b79901-ee87-48dc-8e52-181f5617efd9", "value": "T1F88533676EE09CF8C0DA81759132972EFF6460A01E4CD69B46086E3AFC6B351BB1A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597419, "uuid": "9403865b-d24e-4feb-8994-77c0343462ed", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597419, "uuid": "9060b2e6-03ba-4341-ad0d-614ed0e67dc7", "value": "49152:+0gybgZKB+Vo+rSiZVGqOKg43ibRDo9gLp3:+RybgZniiZI2p2xLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731597419, "uuid": "aabfae33-9888-4565-a013-06efe4e45522", "value": 1771008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597419, "uuid": "ffddcbb0-43a4-46c0-97ec-1265038b2abf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae343d4-a29b-11ef-afe5-82aee05be84a", "comment": "Malware payload (YoungLotus)", "timestamp": 1731597467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597467, "uuid": "015d9f1b-2319-477c-8213-ad10cd8a52dd", "comment": "Malware payload (YoungLotus)", "value": "d3501cba07547fc6b1ed36233fd4a5de", "object_relation": "md5", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false }, { "name": "younglotus", "colour": "#70a934", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597467, "uuid": "902300ec-f97a-46c2-bb4b-cb49606f59d3", "comment": "Malware payload (YoungLotus)", "value": "fb758ef334a36a8ec5a334cfce883b56849cb1ab7e92493074e2adabefcd9b0a", "object_relation": "sha256", "Tag": [ { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false }, { "name": "younglotus", "colour": "#70a934", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597467, "uuid": "c904bd56-21bb-4626-8577-2e63751fab0e", "value": "T1BBE38D963CD64B7ADCF54234D94D8A38149E86B04658E4AF873DA4BAA3703C3B0E77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597467, "uuid": "84c82add-5c34-45de-b81e-9f3d839d43d7", "value": "6c306e45fa9f977a2f45c8a08df084d5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597467, "uuid": "6286d4f7-ca81-4885-a654-a74b8d622712", "value": "1536:Vua+BTv3tIO8MtM+/6jRVGIk1MgHjsPGYYwOda2CqqZOIgQJb0lfjtO+vbWL8xJb:Vn+htWMtf+7GZYGVA2QJgi8xJLDoU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731597467, "uuid": "667f6978-7ad7-4456-b70d-165faadd9081", "value": 143360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597467, "uuid": "f8ac4423-3f12-4615-852e-703da2ded779", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc1ef5f6-a29b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731597523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597523, "uuid": "8456a53d-0cbb-44a0-94ee-cc3adbb5947a", "comment": "Malware payload", "value": "6d2191ccea1c75dd39594af218aadddf", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597523, "uuid": "ad0184a0-7769-4b7e-a8bb-bb97e77dcea2", "comment": "Malware payload", "value": "790c6450175ad2d1d182c11903dc259710cbd6da89f29a07271962e56f5623b0", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "FlyStudio", "colour": "#d3f45a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597523, "uuid": "c20c7ad2-33d2-403b-9bbe-9f6507574328", "value": "T1DC859E23E60184F2D21419B119AA5736A9707B360E348FEBD3D4CEB96C726E1D7372", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597523, "uuid": "60f55ff1-2581-41c8-a871-f80235a0c71e", "value": "250409c527f1649b3c9d070403de40d7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597523, "uuid": "89263f74-88fa-4c45-aad3-b0d632acc9c5", "value": "49152:LQtAWolKL7jqMDjckraiNz0w0KAKuYjZN//yF:sqNyjqMD5aiNz0w0KAKuYjZN//u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731597523, "uuid": "4dd401ce-3ec3-4f16-92d2-066c22d8fa82", "value": 1728512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597523, "uuid": "c08e1be9-ff74-4408-a6aa-491475049082", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7544783-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731599689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599689, "uuid": "6bea04cb-cdcb-4054-a5cd-0ab93fa30be2", "comment": "Malware payload", "value": "3c7d7df37eb16c8a443d2e23a8b83795", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "growtopia", "colour": "#7f3e07", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599689, "uuid": "9ae8301f-ff4a-47b0-b7f3-bac7a231ab53", "comment": "Malware payload", "value": "3453572f3252f42abc0c1ea433f8df6c1a8997621c91a916d1700892dc3f9a3f", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "growtopia", "colour": "#7f3e07", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599689, "uuid": "b4cf14b4-d0d1-43ce-b918-b6139e866716", "value": "T1DA5833B2D5737CE8DA4212FE48EAD0BF06C9D19471690328A2760E37519EE1C97BFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599689, "uuid": "193d9060-9eb4-43af-8db1-5ea48ff2c259", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599689, "uuid": "b49411b6-8f43-4903-9600-d9add69a0325", "value": "3145728:QR9fSZQ/oUTXHtAT8GSmLdb9mtYzmJ2ekd4a:QR1SZQ/xXNxJmpBBW2Ca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731599689, "uuid": "2a3fc1ae-abf6-4d77-a915-0531eeaccba1", "value": 125129576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599689, "uuid": "dda83b77-9905-44a3-b236-5ba413358088", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1991739-a2a1-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1731600136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600136, "uuid": "de77cd9f-0c1f-4d8d-9aab-a7ce8cb5e36a", "comment": "Malware payload (CredentialFlusher)", "value": "00af025b7cdff85a9a6151b16eb25189", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600136, "uuid": "d25bbe1e-3b1b-4624-aad3-f0c79fda41b3", "comment": "Malware payload (CredentialFlusher)", "value": "10b342cac4ebffd3dbfb715cc9e65d427d8311e6b421ba6c81da10f3690dd386", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600136, "uuid": "d9d8ea5c-56ae-45d8-96ba-324ccc1b569f", "value": "T1B0159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600136, "uuid": "e81ef6cc-8f87-4dfc-b11e-d2ed48f06686", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600136, "uuid": "e0f147ab-efae-4475-a6b1-064681fe0a04", "value": "12288:PqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tr:PqDEvCTbMWu7rQYlBQcBiT6rprG8abr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731600136, "uuid": "3032898a-46fb-4ada-92ed-8151242ddb6a", "value": 919552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600136, "uuid": "4f332e78-7656-47dd-a4d0-b6384694878f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cb8e477-a2a3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731600718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600718, "uuid": "8db77ddb-469c-4b86-9f6c-960bcf2c829b", "comment": "Malware payload (Stealc)", "value": "d1f001f7ef0a8b4a1e8cac83b3f27afa", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600718, "uuid": "c9fc2563-c9b2-4590-b42b-791c91a5b22d", "comment": "Malware payload (Stealc)", "value": "5362aa6e249bf37fded95fa3d649d3b790382aaaae7d97fec417ce47f1b7f363", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600718, "uuid": "e57378f0-f359-4846-b899-7f77416328a4", "value": "T1EA0523934799E4ABF8721FF535B022178EA4BA020735510B4388DDFEBA501D8492EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600718, "uuid": "b9b37759-96b0-4b95-b26b-92f3bd130eab", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600718, "uuid": "a9424b43-4b96-4565-9e38-3c041fe14ddc", "value": "12288:TCnS2kAu8qm8H+3+TmLWM9JaHfcMt0Lna2xnfGA/9OJryscpGZfXtzHy555VGM+:TOVqR+7xUHU82xfBoJysL594VGM+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731600718, "uuid": "3ed95f9b-aad6-459d-a953-247608cf5b8d", "value": 859641, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600718, "uuid": "205d8840-4237-40f7-88fb-533026d7544e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92b61651-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1731601748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601748, "uuid": "f95004d4-ce1c-467a-b99c-a96645fee15a", "comment": "Malware payload (AsyncRAT)", "value": "b755853833e683e601e838ed7ca54867", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601748, "uuid": "81ba7b9d-3bde-4dc6-8219-44f26177c616", "comment": "Malware payload (AsyncRAT)", "value": "308e5523c1588d1ba9b89d48c32a0171a674f34c8e50407cc307b56d92bb9a52", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601748, "uuid": "a5a4472e-cf57-4886-bbde-a63d40bf8f35", "value": "T1E8233C0037E9822BF2BE5F78A8F22246867BF2677602D64D1CC451975713FC296426", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601748, "uuid": "868380fb-86b4-4845-b0d4-1c8ced29532d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601748, "uuid": "c272188f-5ad1-408a-b22b-95a23fd24178", "value": "768:kuI7lT8kPK2WUwq2Mmo2qsLe2TSKMfjPdPI7OS8hV/s0bNAtbamdxnHNlHt/1zwc:kuI7lT8kD2rHMLyiS8bNAtnrY3dgx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731601748, "uuid": "bf5c6621-13db-4c56-a2c2-08d3d70a4425", "value": 48640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601748, "uuid": "6afa1e9a-8c71-4634-b10a-6d1ffe4c92d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb05b81c-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731602245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602245, "uuid": "fafd7251-92e4-4c61-b336-f430082bc3c0", "comment": "Malware payload", "value": "69a5cd7674aa3d6a7c10f992b2c78457", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602245, "uuid": "7d8e5a37-a21c-46ad-b32d-aa7454123b70", "comment": "Malware payload", "value": "6206d9596a121ccec1d6fb2c3dc779bc443b910e48cc9b2c78500826d9f00eea", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602245, "uuid": "657f86b4-5f6d-49fa-83ff-14533ef75cdd", "value": "T184279A8D0EB65EF8E225E40733616BA6E44D241FEF453B98F64D71AC9F04085FB9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602245, "uuid": "58446635-4c16-4a03-802a-bc0245ce521b", "value": "24576:vl1ANNjF0yxI+VV0TtJygz6wJFtbv/I1GIeMryz/Bx8BGWX7eJigKdewGYk2Dpdg:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731602245, "uuid": "9b5e3b63-cc9e-4557-92e9-74f5baad9a8c", "value": 21311039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602245, "uuid": "6a061681-a82d-49b5-8641-780b7f26c52f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6abae69e-a2ad-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731605117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605117, "uuid": "234f1240-6e2c-4d22-88cb-febd5e3604f6", "comment": "Malware payload (Stealc)", "value": "a0dd6df428cf543f6f4a17d7d2b04669", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605117, "uuid": "2931b843-d19d-4e13-afc5-4e3d962af6d1", "comment": "Malware payload (Stealc)", "value": "be72b72fcd2102d75695e9df4f8de3abf8451720d9f7891151fbb26426524e89", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605117, "uuid": "dff17cea-5674-47fc-b16f-8a5461585bb7", "value": "T1DB45234143F914A0EDF825B0FF364537AA7DFA318668C52B23605A9D772011A2BEC7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605117, "uuid": "9a60ed8d-6e68-4623-9d92-f477fee16323", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605117, "uuid": "b52a1bef-44c3-42a3-8432-1b9a8ba7eff4", "value": "24576:SnDAIg1lXvDPOEQtTNl1vUjWUlNima/hw3XC4hF1ldM/GTVL:i879GEQ1RvU6vmZSKrldMeL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731605117, "uuid": "431c4b97-bb81-425c-a4d2-ba4bf8520cea", "value": 1180484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605117, "uuid": "a4c87fc9-b4a9-4e98-8bbb-9d3c5ec93368", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1e2c892-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731605368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605368, "uuid": "c2d2c5d5-90db-4e78-bfd3-ac0bd6006581", "comment": "Malware payload", "value": "5a4ff46921e19231d17c534e4b888252", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605368, "uuid": "e0884bd8-8bd6-437c-bb28-a85c7d2048d7", "comment": "Malware payload", "value": "027bf9b93675f0e1b191726ee0091dc59e962cee68525a84bc8784d2f63f6791", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605368, "uuid": "e3ce3167-5cf2-4dc6-a3fd-2e0d5783cf5a", "value": "T182E53991A805F1EFE06A1B7890ABCDC27D5C52B9471104D3A839ACB9BEF3CC515BED", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605368, "uuid": "c0946f63-14e8-4490-992a-6c7cbe25eb0e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605368, "uuid": "abd4d4ac-f0c3-4b50-ad78-960ab56b55fc", "value": "49152:N77TjdBXEZ+4PekwHdJ5Oo0s7uVqfmyJCQhm2j:1jdBUZ+4PenFOouVAmWh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731605368, "uuid": "24197cf5-b84a-4e01-a490-421f7a4d1698", "value": 3091968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605368, "uuid": "e625f298-a373-4029-bebf-3c4abedd7eda", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0de8698f-a2ad-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731605589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605589, "uuid": "f7d846c2-0d10-430b-9355-bb8b676aa9b4", "comment": "Malware payload (Amadey)", "value": "257ff157811def5c58284a1fe618d793", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605589, "uuid": "d016dce3-8269-4a4e-93ef-2df34627c2cc", "comment": "Malware payload (Amadey)", "value": "e4a74a1456a890e6bd05209daff15964958f2b42be46be1711c32d3a45d3109d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605589, "uuid": "c2f5cb75-7efe-42fe-b82d-6ff179227f6d", "value": "T1E7E529F2A41675CFC4DA3778A553CE82F87E46F98720448B986DE57A6D63CC202BDC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605589, "uuid": "9ad143b9-5ff3-4839-92d2-7a3de45018e4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605589, "uuid": "142b7f12-b093-45cc-9bb8-6c84cd649734", "value": "49152:CfENuCzhl2wKyA/KOC7jwKg3xA5xnnCKzp05:86l2wXpOCfwKke5kKV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731605589, "uuid": "ab62fcae-9770-493f-9ef3-0378b8d03d02", "value": 3247616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605589, "uuid": "f262cc2d-56c9-4967-862f-ed61fadad960", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e11f924-a2b5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731608532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608532, "uuid": "94ae4245-d8aa-4a80-afd9-973597d8d74d", "comment": "Malware payload", "value": "4775d2c16e4db778badc5a95ab3ae57f", "object_relation": "md5", "Tag": [ { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608532, "uuid": "984a1602-1780-4f6f-ac2c-43f84756bfbb", "comment": "Malware payload", "value": "149434e69a0f14f8a68d3e2ee4876e72a3961df8823185526bb599e72a9137b7", "object_relation": "sha256", "Tag": [ { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608532, "uuid": "83fc0e40-b33f-4d8d-ad45-d4c1d9814af1", "value": "T1B41523EA5347EB81C65EA96C9C1402B00588C7E3FFE341523E5AA474FBE70AD54D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608532, "uuid": "e79d38f7-6df5-4953-abe5-839747de707d", "value": "24576:Atb6cdYoLcCghrymErf3MAVHn8HVuy0dCY2qSePV19optPd4+:Ob6cdYooHJyFfxVHwALsk1opNdX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731608532, "uuid": "34b43a28-c828-4e04-8d88-6b43cb5fab46", "value": 940233, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608532, "uuid": "4ff7885f-2eb2-4f6a-8a07-15a361052b5f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "394ba882-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731608900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608900, "uuid": "4db19b75-cc09-4b8a-9e20-30cf1937cdfa", "comment": "Malware payload", "value": "17562c74d1c97e1c62dd548473a84bf9", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608900, "uuid": "a6577620-9881-4e16-9fe5-07c57a1b4b3a", "comment": "Malware payload", "value": "c2e18044bbd127bec663dac42484e43acb7caad5a2acc955131d50674135a5cd", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608900, "uuid": "5ed2a6e3-0e88-4416-aca2-5dcce10ab65a", "value": "T100C6336199709693EF8B229B931007A1B2353E7F8A516107C1BF1277CE77A6CA7CD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608900, "uuid": "7b858ec8-cf2b-4cf9-97c3-c5136d96a612", "value": "196608:+NBVhdJLxcNBVhdJLxuBLurPZqfkm2DAY5gvebZvkj2IrJQU791HPl8VOop8aU7f:+BhdTcBhdTcurPIkwwgeFvkj2I+YR8Vi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731608900, "uuid": "279e71e0-e5e4-49c6-8016-03d14c5d9adf", "value": 12465814, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608900, "uuid": "23c84715-e89f-405b-bf35-13f9b9de2538", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3ce9536-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1731609212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609212, "uuid": "da3ac656-9a7b-4dd5-96e8-8b1de4745c1e", "comment": "Malware payload (Stealc)", "value": "aa7e29a5cccf007964fe55434c25e841", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609212, "uuid": "faf97593-cb98-447a-8b60-d92384744666", "comment": "Malware payload (Stealc)", "value": "f73a8753e659025720ad024408f88c756d941bbdaf2fdf373a8284e29fc6c524", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609212, "uuid": "fb3a1c37-2065-4d75-8eb5-8aa91979f008", "value": "T1E58533077CA7A8D9D115CE7BC9EE7309E4BD991107C5297EEA5B013C0CB73A88EA16", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609212, "uuid": "c5552c93-3729-45b7-914d-880699c1b4c4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609212, "uuid": "12b5e247-ee37-4109-bb6e-cfe8ea1b93c9", "value": "49152:dBjHPU3+2ZhUAxsl0p+GT9LoxWxM06b3lud0UFbh6D:L7PUO2ZhBxslBSQWWhr3Y+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731609212, "uuid": "8a9f8db0-1eed-4d47-8a1b-ec12ecd94603", "value": 1845248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609212, "uuid": "60887c10-05b6-4335-bb17-9a073da8dbd2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11a77540-a2b8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731609692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609692, "uuid": "5b1d1069-9dfd-42f4-8da1-e67a4ce79f35", "comment": "Malware payload", "value": "b1cb250adc910ff8f2c697773bfb5a0e", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609692, "uuid": "4083e2d0-2467-473e-b066-2d2328c5a719", "comment": "Malware payload", "value": "512d0f18e7818209b1b6d3cc5cfdba234658c0c89bd83663eb7db4845ef3eb44", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609692, "uuid": "5b52866d-bfab-4830-9e1e-ce4954126ef5", "value": "T1A924D05A3A98639196B35E7E937102ADF55208B81A11DBCFA3C6BDB48E41EF300135", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609692, "uuid": "87c80984-0ce4-4300-bbe5-1d3217e6b59f", "value": "3072:+3k35xlKhbWTQb64DyRMv7dT0U9ooZkTJuuY7bG3HJGocs7NaPFeV2:+3k35ob6GBdX9iEuY7bGXwobNwMV2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731609692, "uuid": "275a3bb4-1b63-4c2a-b422-75f450a2b8e8", "value": 213060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609692, "uuid": "51c278cc-3ce6-4df9-b0c4-84739c62d5b1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f66770a-a2b8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731609876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609876, "uuid": "5dcced4a-72bb-4a27-8ac3-af51b9172992", "comment": "Malware payload (Healer)", "value": "f3ad0be245b8d64341e531c926984d00", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609876, "uuid": "d2d71ff7-36b2-43a3-a2bc-c533ae0711dc", "comment": "Malware payload (Healer)", "value": "cadd60b9148474d2f012c085cff0303b904d406b5b26a347c5833de78c500d16", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609876, "uuid": "dc969772-bb47-45ca-a602-15280bb56ab9", "value": "T16ED54BA1B60971CFD48E23789667CE42985E47B847148CD3ECACB4BE7D67CC125BAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609876, "uuid": "699a5b89-c259-45a7-b9b4-7ad9b628ee6a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609876, "uuid": "70c800df-c47b-4c7b-8e82-003a4f3fc92e", "value": "49152:FYi6BdfcD7OFAkIG8AZh4k1S6sAt9IVVdCb:mi6BdcD7OS9Rma", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731609876, "uuid": "8ce00d64-af28-472e-9b59-21b4270f006b", "value": 2779136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609876, "uuid": "29f3df5c-52e1-45e0-8151-559fe94ee8da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b68c5d2-a2b9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731610192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610192, "uuid": "f04f94b4-98f6-4ba9-bd51-57eef404dfee", "comment": "Malware payload", "value": "55785ea806ead37cbf9b246650d56154", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610192, "uuid": "4af30cb0-4b2c-4330-9bc3-9b1abfde0f1f", "comment": "Malware payload", "value": "0b364d1e2d8f22ef5d13facd43f2c2e064e2e721a5726d619b812b4e4708f568", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610192, "uuid": "dae7efdd-7549-417c-9f43-465a5f97a1ed", "value": "T19434F1D7BFF6AEB463A117F0C8234A1F25D90B8CE4DD96B2FA4784108C09546586DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610192, "uuid": "c98b7e2f-2b11-49cf-83e9-c362c5350b7a", "value": "3072:fGzOx/QXTE+cyrmEVx/QUNq54NyZ4+vnfz1tfa5G26+qs8GENTdjiBV0GhCFgX90:ST0yeD+NyZbN2LoGadjA9hSgt0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731610192, "uuid": "291379a1-c315-4bc9-a4d5-c1dd7556d150", "value": 247888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610192, "uuid": "0e5122d4-d978-4770-8be2-a98ca6db55b2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "683ad247-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731610696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610696, "uuid": "9e255142-26d1-41e9-bf2f-c7770e75725f", "comment": "Malware payload", "value": "3a1f7b7371e6b6c2cfae919ac22b0300", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610696, "uuid": "d06cc351-926a-4562-aeac-3f45aaab2ca1", "comment": "Malware payload", "value": "ef6d3d27293199503a5c6084612e1bd15950c409a7f1868b9b039c122ad733e8", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610696, "uuid": "0e1ba459-30db-404e-af17-524828eff7af", "value": "T16BF4E5A059118129E89B52F5A1FF2FFEA59E1E251380EEF355C02CDB40B21E670739", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610696, "uuid": "e47f02b0-3343-438a-ba83-25c9c706d83b", "value": "d9541c75686031df413cdda252f25b7f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610696, "uuid": "6db48a9b-12d2-4a8e-819e-8717bf7116a4", "value": "12288:Q0j8sJCoErWyvMfomGI1ydFPBo2tH7jfdMpEs/YdM0qbB48LZkSRS3vtYy13vd/a:Nj81iTIdFPBo2tH7DdMpEs/YdM0qbB4K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731610696, "uuid": "fd9546c9-efcd-4649-9645-67113847e5ca", "value": 783872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610696, "uuid": "d3ee7a1b-f41c-40cc-aa85-494af1992b94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731611057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611057, "uuid": "ce362a58-dac1-4a2c-a14d-9c4ac2df2add", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611057, "uuid": "b56e380d-37ac-46b1-b4c0-fcfdcc0b0747", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611057, "uuid": "9fe02e87-42bb-465e-bb7c-80809f1030c8", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611057, "uuid": "1be17327-2550-47d0-a923-131324e30716", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731611057, "uuid": "ba072d2e-ae7c-4cdb-9f16-33b8aee81391", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57075d4b-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731611097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611097, "uuid": "a978f780-d45c-490d-a534-d253cb620dca", "comment": "Malware payload", "value": "725cfe0dc30c0dc6cb4ecee67e76b8ef", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611097, "uuid": "f19b8b26-6cab-41aa-899b-534bb096ef08", "comment": "Malware payload", "value": "5746c9fd0a0af78675b725b56f1cef454a90a29020d0db7165eb00b42fb6cc5a", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611097, "uuid": "20a0c509-6a99-4311-b69e-1ee530ebb7b3", "value": "T1A605E7607D118125EA9B11F4A1FABFEE64AE0E141390EEF763C46CD754B22E234729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611097, "uuid": "b26996cd-7a46-4754-b346-88c50ef2b13d", "value": "fd7b5cdb6c3aa4d772273818db4fbca6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611097, "uuid": "0120752e-fd34-414c-b591-a89d1a4954e3", "value": "24576:z6WbqgoiUAQnMtYatuzmpJDCmXWlEJ+M2C02c78FCo9LhmBGNRQSScv2BrtY/3m0:WKCURUEoFo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731611097, "uuid": "2817ad66-7136-4c56-9163-bfa557134bda", "value": 798720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611097, "uuid": "7d25ca2d-617f-47d6-a9b2-d5270e291e46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7faa7340-a2bc-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1731611623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611623, "uuid": "2e75ed53-12c2-4fdf-b7e1-73cf9ae2edc7", "comment": "Malware payload (Healer)", "value": "759635bf999a052b335cc11ac421af3f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611623, "uuid": "72568b87-1ff6-422a-988e-0568a228dda8", "comment": "Malware payload (Healer)", "value": "ae8f769dc71bcd691447087328e7b9a9cb187ff18d78e3a3e397fd93c5772902", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611623, "uuid": "52b5fb53-b262-41f2-a29c-b3b2c5bf3dda", "value": "T1C1D54C92B54972CFD48F17789927CE82AD5D07F90B2209C3D96DA47ABD63CC111FAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611623, "uuid": "117e4d02-10e6-4c4d-90ac-dd8531806f8b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611623, "uuid": "330b4b8f-4e61-4e2d-aeca-ff4a183628b3", "value": "24576:k8jzYr/325rGbuUD5IxQUU+FlLhiAOD2RcUBdrnqSN42croMq/XATyEUXq1CDD5z:X5or8fgWdWrAnEUXqaMeHdb2wx1h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731611623, "uuid": "95047fe5-544b-4b08-9bbb-80b32128c530", "value": 2898432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611623, "uuid": "59d618ca-452a-4aa0-b40b-0283323f00f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54c072d1-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1731611952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611952, "uuid": "24ae569a-e04f-4376-8da3-498bcce5e274", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "d4bf68346399ccc4bcdcdda968e14d4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611952, "uuid": "01a24d28-2840-4c85-84cc-1599e62d14b4", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "4607b2845580f0697251034eb0189441e76060df8230e39d6a360c3e3c7c9a8f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611952, "uuid": "35861777-f040-411c-9c9d-ad279addc710", "value": "T14BC4E0E266F17915FAF38B31BE39C2E42A3FB5B25E74924D11346E1F09701A1C9627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611952, "uuid": "a9d67aea-2164-4705-8813-49d81c9af71e", "value": "73cc9b161cb40b5d3534b5271a500d54", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611952, "uuid": "68fbf995-9666-4c97-ae12-71244a39ef89", "value": "6144:2plw3BHzMgK2OBDc3u610nXRSzB8NaJLWaNPWUNPt2tfLKhU+HHSaP7xyTj:CMBTzx+6iXEB8NatNhNPktfLKhU+XP7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731611952, "uuid": "0eafc422-486c-4ad2-9dc2-eeb7f2f80962", "value": 585728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611952, "uuid": "5c52bfd2-9b06-425f-b2c6-a5c80aa9106a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59579211-995b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731611980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611980, "uuid": "39004e63-4cb1-4426-ae83-cb277768d139", "comment": "Malware payload (Mirai)", "value": "62c410eb04a846c078cca547e06cc2c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611980, "uuid": "a21172a0-9558-4fa8-b007-f1a419b634c1", "comment": "Malware payload (Mirai)", "value": "202ad0bb88646ea82749932b6d920b6a7d645050f21ec7f2cc8b75ec6b93c687", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611980, "uuid": "852fd634-9f15-4b32-8311-c85e4f3f2159", "value": "T14F733A223EA50A37C4E1563D50F7A72BB3FA47883474821B7EA18E8C7F9D96031537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611980, "uuid": "270fdd7c-d51a-4ed1-8be8-8eac3faab4ad", "value": "1536:NeGDEbVKNK4l7KKVlehqlmTJQOZ0PtoCpE8p3ct/GtnE:N9Sss4l2KVlurJdRCK/GtE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731611980, "uuid": "e8151e45-914b-4ea4-b0d3-ad9693269c0d", "value": 79828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611980, "uuid": "c417a943-6d42-4646-bd0c-7f5361cf16a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec15f72-a2be-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731612372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612372, "uuid": "038f7419-381b-47a3-90de-910ad8fbea00", "comment": "Malware payload", "value": "7abd9cf3c1c7b8e12e309a517a1d64c0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WhiteSnakeStealer", "colour": "#519e29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612372, "uuid": "58e9c37e-bc21-45a2-99d3-bf53e657942e", "comment": "Malware payload", "value": "dd11a80576e2d535d1ffffeb53f9e72466e32ef39d833f43cd6e6f11fc365ebb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WhiteSnakeStealer", "colour": "#519e29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612372, "uuid": "36671b08-c443-4961-a7c9-89d8523497b9", "value": "T132978B0773E60195E5B3D2388AA75107D7B3B8675730DADF329C07152FABAD09A3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612372, "uuid": "8dad1eb1-abbf-4187-a4d3-6bb6267f194d", "value": "b1c5e35cfdb33b753d65d387789d99f4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612372, "uuid": "352e865f-a3d0-4dcd-8dd9-458ac9e30909", "value": "393216:qEr+7CAtJyEsYLrH95y/1uzVyQcNnxu+ds+o0ECKHOQKtuK+Vf6qrdWY6wdla9Fe:qdv86wQ0xYKq8HFrsPFlXxJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731612372, "uuid": "d17e5dbf-3397-4598-b22c-42019c632cf8", "value": 43222567, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612372, "uuid": "39d14ef3-fe22-428c-a818-583474dfe9a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7505a6ef-9958-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731614222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614222, "uuid": "fdfde728-fa67-415b-9c91-42378268d65f", "comment": "Malware payload (Mirai)", "value": "60e01331587653be3152415daf031ce8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614222, "uuid": "d25b7d7b-2d1d-4acd-9dc6-c14b27cf59d1", "comment": "Malware payload (Mirai)", "value": "97dc27f53428736bca78985088c1478358fa3ec95f8a7fb744c7b19c77c3f6c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614222, "uuid": "a3200230-c1f6-4ee8-bea3-bb9f86a45bab", "value": "T114436D63D9325F63C006DAB930258BB843272971918B6EF4586AC37C1643E9DF9987", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614222, "uuid": "d1cb9644-23ba-492f-a415-800d815212bc", "value": "768:/nTMEPvsmVztDvZtSjE3pv0VWovmR7NJXtwY6Bt48uAouS9WWI:/nTZV5nSjopKWovmHJXt6Ba8uHuqWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731614222, "uuid": "1a2a893c-50dc-46af-9152-fde47ac40885", "value": 58752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614222, "uuid": "7ba48d54-cfa4-41d4-824f-66e5e0982bb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d06048df-9d83-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731614335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614335, "uuid": "28dd8885-14f7-4f99-9ece-001a4e692692", "comment": "Malware payload (Mirai)", "value": "d8b9115310ca0429f6ec2473696156a2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614335, "uuid": "9f2cae0b-7642-42e6-8e5b-f2f8830f0ed9", "comment": "Malware payload (Mirai)", "value": "7f089801a37f1d9a83a5103c8f9b1c6fc00f9ce699cb812cc23704aea8d46c8c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614335, "uuid": "6d817545-4876-4f13-b19e-7e62729e260e", "value": "T1A9832856B8819B21D5D512BAFE1E518E3313177CE3EE73129D20AF24778B96B0E3B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614335, "uuid": "45233384-f11a-4417-8a22-4a96fb4f6a50", "value": "1536:8MnYWXGwv+plZCHrnhw8KsUFaS4EsbGMxiUQXZA6dcuXG7Fd57Yj:OODrnhwbsUFaS0QXZA6DXGxdVk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731614335, "uuid": "ad3ef4a2-66ae-46a9-b82c-26de5ab93312", "value": 87392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614335, "uuid": "a441caa8-2d13-46e0-a9ca-f07df442bde8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00950fd9-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731614817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614817, "uuid": "e4064080-f0a7-427c-81e9-c505c309d60a", "comment": "Malware payload", "value": "c94fc378d8fa96865f05082b36c651f0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614817, "uuid": "8f5b2d21-a319-4df9-a28d-dbdef14fcd5a", "comment": "Malware payload", "value": "d2b55705ebaa1d3d4a619ec4bb9c0d99e7a3eafbf78a92d8687c6c2de6241af5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614817, "uuid": "d84e1448-4302-4b77-9dd6-7bf7111ac3f9", "value": "T1802203EC736073F09912C65631F4C80A63A859C16C9E5F2A97882465D53CFCE3F2BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614817, "uuid": "9ad0e304-7807-4298-80d1-fa800d85c5ab", "value": "192:mRRWKWl7y+47HzBhh8XDYUcb7fL7G6q7tVD1de740Q40A40M0D0H0R5ZfdFNG6KP:ZsR6Kk0r070M0D0H0F0r070M0D0H0r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731614817, "uuid": "65c28134-9d70-4895-8515-e691df2e4085", "value": 10662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614817, "uuid": "9e5130ce-1b92-4d4d-8cce-4309e44609b4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c085f21c-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731615139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615139, "uuid": "38c3dfa0-985f-4507-9000-3eaccfe7b70c", "comment": "Malware payload", "value": "bbdf04d35f880f4e550995592b0197b6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615139, "uuid": "7e14e89d-e1d9-4349-8eaf-2fad5072a4c4", "comment": "Malware payload", "value": "c1a53aff4dac975efa28ed1320adf719198c13359826cfed9434fa9e50d495a7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "update.exe", "colour": "#424273", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615139, "uuid": "54e1c001-a706-4d63-821c-23b897b20d7d", "value": "T1E85633899080E9AB66F64321D1C2EF945F4519A70FC3E0767618F6E52212B44F33E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615139, "uuid": "808ea48e-9407-4abc-bdd1-02f5a2e53994", "value": "98304:hT9ixIBL25ydHO4d1vTg70+l5iCGwJ1JP4vq3rs6g3jKLAIoPrVgaNkCdbSo1Md:FhL707fbiCGw/JCq3rW3jIoPpgQSQA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731615139, "uuid": "f9d06a33-a4ab-4e67-98e1-71db349546fb", "value": 5954144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615139, "uuid": "1f98f0fd-f80c-4ca0-a086-b21ec4fd55ca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf8f9148-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731615165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615165, "uuid": "f22010cc-4d51-4904-80d6-69a940b519dc", "comment": "Malware payload", "value": "8297f38433c15736cb9c94486349e07c", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615165, "uuid": "5e109f04-363f-4cce-a461-36108a39a9dd", "comment": "Malware payload", "value": "9e4fc734b47dc39bffe62d48f5d92652c16daa5f4b65e22091de97beab8aa412", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615165, "uuid": "38b07499-65fb-48c8-8ea5-fcf81d8087fd", "value": "T1471523EA5347EB81C65EA96C9C1402B00588C7E3FFE341523E5AA474FBE70AD54D0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615165, "uuid": "4e0c7db7-bf00-4e59-8002-ead53e60cdb9", "value": "24576:Atb6cdYoLcCghrymErf3MAVHn8HVuy0dCY2qSePV19optPd4W:Ob6cdYooHJyFfxVHwALsk1opNd3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731615165, "uuid": "b0660e39-3eab-4249-956f-661da9950516", "value": 940233, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615165, "uuid": "22f0574f-d569-4524-aa9f-2e6b1768c450", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e33fce0-9431-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731615296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615296, "uuid": "19495f20-0e8a-4dc3-ada9-dff1b4e31245", "comment": "Malware payload (Mirai)", "value": "bb9275394716c60d1941432c7085ca13", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615296, "uuid": "75d32ddf-4061-4b99-a4f6-776b8f490bf8", "comment": "Malware payload (Mirai)", "value": "3c0eb5de2946c558159a6b6a656d463febee037c17a1f605330e601cfcd39615", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615296, "uuid": "a6790fe8-2c0b-4c62-a7f7-570530d1d37e", "value": "T151932A037642C9FFC05BC1B417AB6936CD22FC7E0A36719567D0FEA16A09DE16E2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615296, "uuid": "e57c651f-0952-4eca-9dce-52ea2ad249aa", "value": "1536:lDVOLhrwmN92XVNbMxvk2bB3n2GNR9maOY7h8RGEhXXBP:9VO9v4vbMxvkEB3VNR9u4h8RGaxP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731615296, "uuid": "2da0803d-f345-49b7-bc7e-fbce1b6b731e", "value": 95576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615296, "uuid": "45d82b8c-0cfb-4445-97c9-5455d8ec80d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c15b848-9d7c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731615457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615457, "uuid": "aa0625c5-7d53-4648-8221-94962a8d4562", "comment": "Malware payload (Mirai)", "value": "45c898246a8ffe0b7cc20fe25669da04", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615457, "uuid": "4bbd468d-412e-49cf-99ab-fafb8973e05d", "comment": "Malware payload (Mirai)", "value": "1b0846e58fbb6a0e72d25edb81ec94961c0c7048a4e6f26876660f5a26675c77", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615457, "uuid": "e276bb89-a970-4073-8555-445ca39f3458", "value": "T195A31A46B9819F11D4D631FAFBAE414933136FB8E3FA7101DD20AF64238A9DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615457, "uuid": "6e136e06-1aae-43fe-acf7-e090eea4f850", "value": "3072:lJ8o+XRPI6aC6/y7sdQQVAs5mSAwhj8zX:lJ8l66aC6/y7sumANSXhAzX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731615457, "uuid": "f9abc8c4-a23b-4fb8-b6cc-f1772f6f573d", "value": 104860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615457, "uuid": "2ac715b0-ab0d-4f64-9bb2-4d9db55c7be1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b37c547-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1731616450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616450, "uuid": "f785b582-9325-417e-96b8-b427ad19bd00", "comment": "Malware payload (Mirai)", "value": "9a111588a7db15b796421bd13a949cd4", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "DDoS Bot", "colour": "#45785a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616450, "uuid": "b9b6b8a7-8bdf-4540-ae21-1876bee73449", "comment": "Malware payload (Mirai)", "value": "e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "DDoS Bot", "colour": "#45785a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616450, "uuid": "7dad63f2-434b-4f70-885d-4c3bf4906c8f", "value": "B2930272135417C5894772B4209409F5363AA265FCBF34FBBF93C66027834BCD49BAA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616450, "uuid": "3c419c5c-99ab-4daf-afb0-686559a14213", "value": "1536:pymLLU1F5kHIrIj0D6rhfd+lK3exiTCzxNtI4sZLi6UEbFEBFaW1EH6t6wfPP/Q:2F+ooxalK3exiTOijZLdUEbFlWPP/Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731616450, "uuid": "bc9bfb39-408e-4d77-b9b9-9c8b27199583", "value": 95268, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65425ea0-9d74-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731616653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616653, "uuid": "a9cb8c0e-3405-494f-8353-30c85d2f2ef8", "comment": "Malware payload (Mirai)", "value": "559f129d380ad1cfb60792c6b2dc3d32", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616653, "uuid": "fd831980-a246-4b52-955e-772cf6843d44", "comment": "Malware payload (Mirai)", "value": "fbdbd0392519e49a09e647d8c83046fb15d6dcbb8246ee2f813d10018ba8ac3d", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616653, "uuid": "7715e56e-fa54-4fc0-af9a-55925a484d28", "value": "T160A3C80E6E219FBDF368823447B78E31A75933D627E1D681E26CD6101F6024E585FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616653, "uuid": "5bf94042-6c95-40a8-b6b8-0c78dba52586", "value": "1536:1LuJu12iTfjZWMQ1PYQoUfV2uV2RM2ev82krWtESNUngvReJAbdO2IAo:1ufmWxloUQ2kitt9+2IP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731616653, "uuid": "8454693c-0227-4223-8c2e-f3e587b330a7", "value": 101564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616653, "uuid": "d96713ee-c39e-4194-88b7-f809a87040ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fa16080-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware payload (MeduzaStealer)", "timestamp": 1731617178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617178, "uuid": "94d44150-05d5-43b2-aba4-0b78b38c8423", "comment": "Malware payload (MeduzaStealer)", "value": "cd51c014cb51d3af57ce68fe283b3714", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617178, "uuid": "86949904-eb6e-460a-b124-8a9f86dbb35c", "comment": "Malware payload (MeduzaStealer)", "value": "ffe7b7a94481baf07af71357c2eb9fe4da46168b4e050e649ab5a7fe8631568a", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617178, "uuid": "dcd560fa-2612-4c56-b1b2-a0db9d9c339c", "value": "T120C51206B3E548F9E0678234C8A70E8AE773B8050B5196CF067CC7A65F2B7D05E3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617178, "uuid": "764b5936-1de9-42c5-8197-8417284fb4dd", "value": "06e3eec5fa7862a0cf11cfb70dc048e6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617178, "uuid": "b832b803-006e-4ae0-977e-bf0028b96862", "value": "24576:MoEKQByjnqh0lhSMXl6OztcajVoYPLtTPyAAewGLP23WaHK5TsjOxkmENDcv8oPc:jLzjnKOzLjVoYZPRAZGyBq58OdcDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731617178, "uuid": "bed83dc6-9988-4383-bfcb-768cd62fa19d", "value": 2632704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617178, "uuid": "f67d472e-d5cb-4cd3-810e-73a1791d5d7e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "787deb41-9da1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731617264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617264, "uuid": "40b007f0-fec3-49f2-b7a8-aa3adbe3c53b", "comment": "Malware payload (Mirai)", "value": "a016f79253a036ed87dd3ae118767cf2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617264, "uuid": "e16da91f-f043-4dfa-b07e-3f01480a9bdc", "comment": "Malware payload (Mirai)", "value": "95f180a725b479687bdb9818991a68be75f0ba901c969cc93746e9996c1d0e50", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617264, "uuid": "6a5f1c1c-f9b9-48e6-bd8c-683ce9695ae6", "value": "T179834C02B30C0947D1631DF0363F1BE193AEEA9122E4F685685FEB4A9276E335546E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617264, "uuid": "c441ebe4-a06c-4e5b-be3e-050c1daf8919", "value": "1536:9j1OSgOjZJd7itN20sugBqRzFQ7QRssq3/fq6Ow0+zy5:94SDCjzFeosZs+zy5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731617264, "uuid": "1ad88fea-5a77-4e35-b54d-545176dfcddd", "value": 87576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617264, "uuid": "74831c49-b6d1-4b09-88fd-f6817c3d2439", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d720f3d2-9d7a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731617674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617674, "uuid": "84915fee-4eb4-48a1-bef6-7a6e7094526b", "comment": "Malware payload (Mirai)", "value": "4ad582d49f505bfab7de84881998685b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617674, "uuid": "5479c91a-a133-4d21-b81c-43095c233be3", "comment": "Malware payload (Mirai)", "value": "b1e8713db49c15b272baa11e5569ecb4f22fd6064f5aa59ed236d0af58f159a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617674, "uuid": "823b7082-116a-45c3-a84a-22bb349fff24", "value": "T1F9A3C40AAF610EFBD86FCD3B06B9070535CC551722B83B3A3574D928F64A14B5AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617674, "uuid": "9a73d14e-68b5-4c6d-a59c-f963b531cd89", "value": "1536:F5qh1zJkioSuNxDlUllHCWcTE8NgZFsbNwGEalou39P6pI:F5qh1i1SlTcTzNgrz06pI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731617674, "uuid": "a745bd1e-be0b-4fd2-9e10-d43a8dc1ac11", "value": 102508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617674, "uuid": "eb46cb79-9af6-4eb5-95fb-e4ef5c1a9e54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731617675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617675, "uuid": "822bd3b4-99f8-49b5-97e7-daf92c2af46e", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617675, "uuid": "b2593c5f-4ca9-4224-8474-3acf23db651e", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617675, "uuid": "2547c1c6-a53b-4511-aac9-436c4dae0d87", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617675, "uuid": "1991a703-6d0f-4fff-8e53-7439928893cf", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731617675, "uuid": "b0141e26-bf2a-4d16-9d04-0f91baa480ec", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbe72e21-a156-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731617888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617888, "uuid": "738e6aec-15e8-4629-aacd-e2d24714d937", "comment": "Malware payload", "value": "3e508e9f9e679391abac54cab1b87f9b", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617888, "uuid": "6e627a1a-f867-4655-9e79-70539ff22960", "comment": "Malware payload", "value": "81b896ff547a49493fab4c67362ab7d2ff2459ed3df8dd503285fc08e7e0c544", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617888, "uuid": "14fad224-a160-41b8-b99c-bda41f9ece54", "value": "T100E533307D79ECFE49BC813CB1AFBE1C5E741B6B488961EB8B883443939E78195195", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617888, "uuid": "da0f7499-1d55-4f5c-bd15-d8ff09ab19f7", "value": "49152:x0HdW8FgG8Kbdyf7NQjDvhII6VQZmDhOxn:o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731617888, "uuid": "8b99b9d9-c2ad-40eb-a4c9-cbaedb5a6fc8", "value": 3039782, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617888, "uuid": "5396b39e-c301-4b50-9588-0dfce06c9741", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acf58a9f-9d76-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731617984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617984, "uuid": "505d3666-e3b9-4f0a-9f79-4654bbc79892", "comment": "Malware payload (Mirai)", "value": "d09db60a70d5b53b5b53ad39476fd7e8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617984, "uuid": "1211a3ed-f3bf-43f0-b3fe-4c333a79663c", "comment": "Malware payload (Mirai)", "value": "36b5ad3793ba15e920ea49a43467610bfce85149afc12af166a56bb2011a9165", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617984, "uuid": "9bf78d8c-adde-4c9b-9b4d-a20ec6d9e9cb", "value": "T19D731941BC819A12C6D122BBFB6E428D372713A8D3EF7207D9256F21378796B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617984, "uuid": "0194dc39-2446-4662-be77-68c9b357d03b", "value": "1536:yfwmd4udfzPWgPfePqRRiN4254h+Vl6Ovg:yfwidfqYeyRRiylQg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731617984, "uuid": "eb08c3d7-fa64-4c8f-a56d-94c220182701", "value": 79208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617984, "uuid": "75307637-a1f8-4283-aef1-6513f0efdb39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e17ca5fd-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731618201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618201, "uuid": "4a29748d-6ff8-4cba-94dd-a49e4864f0ee", "comment": "Malware payload (Mirai)", "value": "9d526474fb45b10806f7a079de157b41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618201, "uuid": "eeb35419-4961-4ad1-8f97-033d2a837158", "comment": "Malware payload (Mirai)", "value": "962ef40999fae3d3e6c02c0a6d2fcae72cc0c49070b0f5179ce1b8df7759c7b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618201, "uuid": "0bcb4e7b-a329-4fb1-8fe3-cb080b81ee4b", "value": "T1EB041909EA50572BC2E237BFEA9A438E33334B48B7D733158A345AB53BC5B985D321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618201, "uuid": "e68f3966-18e9-4dda-a7d0-d199112edd7a", "value": "3072:rsilxxogZF5ZM54anv8wy6ybt0qld3Dt46XIYM/93CVQlq:rsiF24anv8wy6Mt9zt46XPM/93Cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731618201, "uuid": "f6f003ff-de3e-4b77-b60b-34b527bede8c", "value": 183195, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618201, "uuid": "dc2b3c73-59ff-4a42-92d6-c6e070ad3573", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5842402c-a2cd-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731618830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618830, "uuid": "dda2a239-f5d5-487f-a006-d13b679b305e", "comment": "Malware payload", "value": "c7891d37e312bee8ace2f908620f78f1", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618830, "uuid": "c2c899e6-7291-4e42-ae5a-8e1a62ecabb3", "comment": "Malware payload", "value": "b3911c9d7f95c8402dfe3f60a03606de53605d884e6497c6eac9f6f2199a3ad3", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618830, "uuid": "0e72071e-d4a1-4190-94f1-500cba40505d", "value": "T1D434EFAC7CD68328E92300D1B60FCB77CE28DEEDB55ABA0741D69193133E6784617C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618830, "uuid": "5336154f-4902-444d-ba03-ac703d9e5e43", "value": "6144:cOS/DAJ3TGux4WgzHEEaZONIboFqrCOZrzSxKDhxtuuO5:w/U3CxYEg2CV7lzSxK9DuH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731618830, "uuid": "a944be33-ad00-4c6b-bf5c-43e60e6002c5", "value": 247883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618830, "uuid": "e4bab126-a3c8-4e86-8bbf-8770783f48b2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66069fea-825a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Neshta)", "timestamp": 1731619147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619147, "uuid": "cdcf2cbb-a75f-4cd4-869f-ddd38a26635e", "comment": "Malware payload (Neshta)", "value": "a69f29123b5396c5503c88c5586faed6", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619147, "uuid": "e33834c8-5ccb-47ed-a9d8-fbe7e4fe0c64", "comment": "Malware payload (Neshta)", "value": "ac5e75993ee0d837e3ec1810d006a6b2ec66d861984d59b6b18186f97a50759f", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619147, "uuid": "0951d7b4-6ec7-4e8e-b6c5-2bde99b2dec9", "value": "T18DC3AE767B04997A5EEF34E4A4200F494C7C454BE33884E077C2B0BA771B498DABD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619147, "uuid": "43133e86-7cf8-4e15-b202-5d730f98e239", "value": "3072:orCebDuaICgorNrzwwA9BHjRyNJqFRzBqohM0:orfbyOzNYDPVyNJq0YM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731619147, "uuid": "c9f6b16b-be87-496c-8765-9297148659c6", "value": 118196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619147, "uuid": "aa92eb22-fe13-4e53-bb79-affc20c477b8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "166d2fd2-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1731619149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "73f94ebc-ba6a-4ba0-8f84-dc53f631f266", "comment": "Malware payload (LummaStealer)", "value": "d23cfc9f21d676ba59969332e6b05b3b", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "adc73c04-beb7-47b9-8984-41f907fb2936", "comment": "Malware payload (LummaStealer)", "value": "24ba6dd7645cfada081244f3b0999a2c185afef7659771d487f3a4a2541c9a34", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "62e41ff6-8e6f-4583-b081-855c186c38e3", "value": "T1F4948D3F79086DB90EBF242169092B494C2D78478B74C0E9FBCEA4B9C337C54857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "e5ce5b46-fbe6-49e8-bac6-976a00ff07b7", "value": "6144:fT/wkYrecLyzq4xzdxvLTAUJlAXEDpVwCiiVc5jqSwLVRMwWsd40/JxJGF:fT/wJAzT1L3DAIXwCii+tqSwLXCj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731619149, "uuid": "bfa964e4-02d2-4c9f-955c-f5b9f3655a15", "value": 427308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "2d96e316-6f77-4d10-8fb6-4144180a4cfe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "169d1316-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731619149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "73c52032-2b4a-4f65-b1de-116aae375e99", "comment": "Malware payload", "value": "889703c545076788f3a4eef6c33176e0", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "3cddb69e-e043-42e6-80b9-f60e19ec096b", "comment": "Malware payload", "value": "1172d5fe0ecf2b97ce562446c877492dd7a216973e9b1b63e59837db71193bbe", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "8491980d-d8d5-4590-bde9-e0247c6c8c94", "value": "T125948D3F6A08ADB40EBF286569152B494C2C39438B34C5D9FBCEA4B9C337C54857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "d57e247d-2bbe-495a-b0ca-f5df48552964", "value": "6144:pZShAkgmiYKFAeUOhTqwefBIarYGISIx6A066bv1tQQzo7R89F3/qpNdTpwhzRSZ:p50WEOhfefBRrYGIx6ntuNRyCfdc+p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731619149, "uuid": "726c2ed6-d718-4cef-817b-9e535dc7bf36", "value": 422244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "fd78fe91-079b-4d35-a01c-3da79b31531e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16a1a038-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731619149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "1c416fa8-eb3f-4a3b-ac54-1def57eb5ec9", "comment": "Malware payload", "value": "3cc3d01391bf6fbd6223ca149201b5cb", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "870cd778-e022-4fa8-bb66-e5d01ebec9e1", "comment": "Malware payload", "value": "52783372717d39e205e95e3b5b57b8375f411691b3377c625d06b70dfc87fab9", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "d416118a-5d5a-420a-93ad-3b28b8293ea0", "value": "T153948D3F6A08ADB40EBF286569152B494C2C39438B34C5D9FBCE94B9C337C54857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "61bf54bc-61d0-4ed0-80e7-35849ddbc0eb", "value": "6144:pZShAkQmiYKFAeUOhTqwefBIarYGISIx6A066bv1tQQzo7R89F3/qpNdTpwhzRSZ:p5oWEOhfefBRrYGIx6ntuNRyCfdc+p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731619149, "uuid": "ea5f2ffa-adca-4097-8044-79a6556d6a20", "value": 422224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "dcdf048b-1025-4f9e-b938-27e8f5891fe7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16a28f71-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731619149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "27e3c75b-509a-4a4a-8216-f88f18729e8d", "comment": "Malware payload", "value": "a86ec60030b3ad31292974b7640b57df", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "be85de34-26d6-463e-891b-4dbaa42f113f", "comment": "Malware payload", "value": "ca9911818253b6d4ae00102fc26f8b7f86d707015933f046a4ea6ceb56bffc52", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "fbd528e6-4f17-427d-adbf-61fc0d95fe0c", "value": "T158647DBB6217DE9E4FBF1E08C4040749DC6CEC57A2AC42EC7FC2986A81B74545C79A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "6de2b6e3-22e4-4073-9757-f38ea3c3d4af", "value": "6144:3YfkNY4v5Kg7xqrRFInFieeNT1CXI2YhV+hXEpxvtcinVSU:bBBcrFNTEjmd+WSU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731619149, "uuid": "86cbc410-7dee-4ee7-8ba7-479120904579", "value": 311820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619149, "uuid": "bf767dc3-a896-40eb-9f61-f9f4047482d1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16bc134b-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731619150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619150, "uuid": "a6160e83-2a94-4e08-937e-5582bea0fdef", "comment": "Malware payload", "value": "4bae27521969a26f87412f9832eadb50", "object_relation": "md5", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619150, "uuid": "4d08b12d-5a3a-4518-bc48-a837ea03e190", "comment": "Malware payload", "value": "28ef81e408266cc8fcdc29ad41c927423f9a76331a43aaf4f248358654004d08", "object_relation": "sha256", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619150, "uuid": "1e8b3eee-fd72-4b3b-9468-1e08ed370fbe", "value": "T11A948D3F6A08ADB40EBF286569152B494C2C39438B34C5D9FBCEA4B9C337C54857AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619150, "uuid": "a558c9f2-6ad8-48a6-b39d-035b59f7c4d2", "value": "6144:pZShAkbmiYKFAeUOhTqwefBIarYGISIx6A066bv1tQQzo7R89F3/qpNdTpwhzRSZ:p5LWEOhfefBRrYGIx6ntuNRyCfdc+p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731619150, "uuid": "95ae7f8b-cb3d-4fbf-b84b-4a6545e98fc5", "value": 422244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619150, "uuid": "5932059f-b19c-447b-a078-29ad6bad6a8c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fb9c039-e5da-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1731620047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620047, "uuid": "284ec78b-f4d6-4034-a44e-b99f6524af8c", "comment": "Malware payload", "value": "8bec858fb2ad735ce7dcb1ff009bbb90", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620047, "uuid": "d2bb1401-19f3-4262-91f8-3d012cff7ae2", "comment": "Malware payload", "value": "c5184d125d847cc38ecc5e26454c035e94eab9262d1de2d06ea853e29bd28777", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620047, "uuid": "e8af60ab-fe99-4b1f-93fd-cc9282f9ef43", "value": "A2640287FB11BC1BCA010BB125DB0B9977BCDA5B82CBD091B7D0885F39BA185B7A11C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620047, "uuid": "c422eca2-d464-443f-a561-d8cf19a6ccc9", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio/Q33Q:p3lOYoaja8xzx/0wsxzSiqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731620047, "uuid": "0ab9988b-a02d-4d02-9c87-1f0d1dfbe30a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620047, "uuid": "bd8bb793-2528-48a2-8a55-6e47c9d08124", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3899a27-9d02-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1731620647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "e4643cf4-da24-4118-b1f7-7f8a898c3a2d", "comment": "Malware payload (Mirai)", "value": "34ef09c6bfa12c8bb0a4eb1111163f49", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "86f70752-8fed-4b4f-a36b-d3eace7d7801", "comment": "Malware payload (Mirai)", "value": "537907609ffc903d04b1aa5309d9bd02b95a31f343763ae83cd61f9c1b797438", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620647, "uuid": "78637d80-090b-44a2-931b-cb8e9a8fee5b", "value": "T12EA36CC5F683E4F6DC010538303BBB729A77E43A6135DEDAD7D86A33A851601E6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620647, "uuid": "915b056f-c6ca-44c7-8457-25f60a5bfa32", "value": "1536:nY/p956QNnt3lwwt8I/iXbPkOUh5OkMI9fmhzjD3087sYeyOZF6hpUGRZSaaBY:nSN6Qt3lwwtpiDjUh5eIZmN30isYNOby", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731620647, "uuid": "01f97ded-d4e6-421b-bb62-931c5cbae004", "value": 97972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620647, "uuid": "8d2e0b3b-5724-4180-8c23-768c7f7b9354", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1731620708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620708, "uuid": "0412c41e-4fb6-4378-994b-6ae479c314ef", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620708, "uuid": "f906be6b-12f6-484c-b2e7-29b37f763e26", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620708, "uuid": "521a05f6-9859-439b-8e19-61885c6247e1", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620708, "uuid": "181ad50f-6810-4593-9c61-47fe908e371d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731620708, "uuid": "312c3feb-c653-4b22-a961-d177a199e23c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "484d901e-a2d5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731622239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622239, "uuid": "b0f15662-099e-400d-9d20-ceecfa15bff7", "comment": "Malware payload", "value": "17c6552c72c762ec0dcf77ba95f25c96", "object_relation": "md5", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622239, "uuid": "ab4d14e8-88de-4a67-8c2a-7059cb19f9df", "comment": "Malware payload", "value": "c2362ffed94e8a8824711fc14aa00074dd3a8a1406e7e6d1a54276965d02c634", "object_relation": "sha256", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622239, "uuid": "f783014b-37d9-48eb-93bc-973669c8acdf", "value": "T146E0C2229618052BFE0D210B1563024BDD8420F44A2D233407BE290CA92DEBD37DB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622239, "uuid": "076876a7-11ab-4262-921a-cfefc6c7889d", "value": "6:gsv3+jgK9jj1PaHMTGwLh8JdD9vz6MFG1aHMTGxtYMf5Oz06MFG1aHMTGxtYMfk:xvFKl0CGHD9vOMXxCMRu06MXxCMc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731622239, "uuid": "b5f2bb05-2ca8-480b-b47d-c888f15ecd76", "value": 307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622239, "uuid": "f9f2f39a-1c8d-4bc4-aa09-1b34cafb3940", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0b868c6-a2d5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731622441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622441, "uuid": "ba5c02f8-132a-415c-a723-8ff00fd052aa", "comment": "Malware payload", "value": "79da60ba15ea5fd382d69bbf1dd8162d", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622441, "uuid": "ef1d77ea-f6b1-45f4-bf56-a3946cf6fb59", "comment": "Malware payload", "value": "761f477fc0360657c5d8ea2dcdbd8f0445a9487cf05ec0d01f84e82dad2807af", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622441, "uuid": "f9b050d8-1ad7-464d-948d-75e778e33b16", "value": "T1B122BBD5210504770CB59E1E74D91CE4580879916CCD8E6E88D836EAC90EFFB3996E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622441, "uuid": "3e4ff393-2791-4a67-926f-32176a537778", "value": "96:Yko5LVlLgmWQQlFLLV1cLctctcPZRJSL9l9F9w9B/5A8dlNalNSlNvNSNONz1Vg2:yzsMAmmk5vPw9BmDMmmrvPw9BG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731622441, "uuid": "4d74545b-e0d9-486f-99da-b8cae08c012c", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622441, "uuid": "da63f871-4eca-4ebb-9d05-eaf0e36a4fb4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bd16fdb-a2da-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731624339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624339, "uuid": "69f3da78-6332-4e7f-b536-fd1939d40f1e", "comment": "Malware payload", "value": "551980cdd1c458a44c4ceabcbdd9ce5e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624339, "uuid": "48e0c912-cd54-4c37-a820-40f6ec2ba869", "comment": "Malware payload", "value": "5a09f6a668b4e98c68139ec3396940066dd993c18bff08b904526393fb96e27d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624339, "uuid": "2c0b1f2b-7984-4717-9a95-c37dbdce04e5", "value": "T193279B8D0EB65EF8E225E40723616BA6E44D241FEF453B98F64D71AC9F04085FF9C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624339, "uuid": "2a8f8dc5-b02f-41b3-83fc-dedd06816bfe", "value": "24576:vl1ANNjF0yxI+VV0TtJygz6wJFtbv/I1GIeMryz/Bx8BGWX7eJigKdewGYk2DpdQ:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731624339, "uuid": "98d6ec52-538a-4366-a167-b1d7388d56f2", "value": 21783564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624339, "uuid": "f44c9c43-4d6a-46a8-a3ae-f0183ff59444", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fec49d32-a2da-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1731624693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624693, "uuid": "52f7781d-73dd-4bd5-b921-51bad40c3726", "comment": "Malware payload (Amadey)", "value": "9c0c827b6abebfdfb1bf2fe9bcf7d939", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624693, "uuid": "6690e272-a5cb-4b9f-a5c0-9eb17c55c074", "comment": "Malware payload (Amadey)", "value": "3216ca52d4ea7c82f879626f40e739552faf9f778cc927aa3a38d44db8de2371", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624693, "uuid": "efb805f1-dca4-4d7d-bb33-1155a31fa951", "value": "T135E54B62A509B3CFD08F13744567CF89981F03BA471509CB987EB47A7EA3EC111AEE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624693, "uuid": "3cc63148-7c2d-4536-b6fe-1e7242e5f994", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624693, "uuid": "b30d15bd-75e0-4721-9467-a17375c62670", "value": "49152:0/mrx3qt1IiBsAVtA0lZbZJEYMYBszAKHR7ph28dIDs3:aMa1IOVtA0lZbZJEYMssUKHtDnt3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731624693, "uuid": "973cdefa-6904-4c33-9061-6707cfbb3c8f", "value": 3220480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624693, "uuid": "bc2dc8b3-df8f-49dd-93c5-57fd6b86c5c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97260a33-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1731625868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625868, "uuid": "de4f087c-2dd4-4b64-8fc3-827eeb08a78c", "comment": "Malware payload (Hajime)", "value": "b8ed2cb3e9fedec5b164ce84ad5a08d0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625868, "uuid": "bd2cee6f-ec58-49e9-bace-1739a99c4f8c", "comment": "Malware payload (Hajime)", "value": "d5601202dff3017db238145ff21857415f663031aca9b3d534bec8991b12179a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625868, "uuid": "d7530721-3413-41ed-9b48-546c0956bdd3", "value": "468312CFA4598B66EC7ACDF809DB59044D46621E738B75EF530CD59C2038B862C8E92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625868, "uuid": "6f3a9c83-1b1a-437b-b955-8bfbfe159eef", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XuzGNy+iSc7tNUZM:mOE6PWo1T5bz4LVMXuzVNScWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731625868, "uuid": "1de8a5e6-b219-4714-a993-b95faf89259a", "value": 85128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97129f0f-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1731627096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627096, "uuid": "192bfba2-345f-46fd-bd2d-25a0174525aa", "comment": "Malware payload", "value": "9b43926c3a5059e9a68073573d4d929f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627096, "uuid": "ecdd9c2b-11e4-4704-ad41-c2906887c005", "comment": "Malware payload", "value": "523c9f1743edbcfebdfc0f94a702ad730cf194a55ab10d519f0e9d85a07b3db5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627096, "uuid": "fca8889c-fe13-49c3-a39f-8b331373f80b", "value": "T18AE52A52740966CFF84B2E749CA7ED816D5E43BF071109C3987A64FA6E63CC213A5E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627096, "uuid": "01289a99-2486-4d1f-af27-25784250587e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627096, "uuid": "347409b8-c26c-4b36-b14f-beeb2060f8bd", "value": "49152:M/FlKcKjz3VdUVAAFJF2DGea8UNM8A7muHmpWx6t8kl:M/FVKjz3VdUKAFiPdUNPA7muG8x6t8kl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1731627096, "uuid": "55357235-c58a-4460-8b42-0b6c23cdd3ee", "value": 3135488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627096, "uuid": "646f171c-dfb0-4d79-aa98-5ae3a0c3ce27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542407, "uuid": "68a8dc4f-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542407, "uuid": "68b60625-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542407, "uuid": "68e4c786-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542420, "uuid": "703b7b4c-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://node.noxichosts.xyz/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542466, "uuid": "8bd6529b-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542466, "uuid": "8bdf3a29-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542479, "uuid": "93c152f2-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542479, "uuid": "93cfd39b-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "93d80b8c-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "93dfbf34-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "93e7e86d-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "9401a77e-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "9407f86d-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "9407f870-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "940bb55d-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "940bc1a6-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "94100405-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "94158978-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "94159206-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "9418f069-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/nice/Satan.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542480, "uuid": "942508bd-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://panel.noxichosts.xyz/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542525, "uuid": "aefc85bd-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542525, "uuid": "af119ecf-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542575, "uuid": "cca21dc6-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.91:53601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542585, "uuid": "d2d36957-a21b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.137.70.156/nice/Satan.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542946, "uuid": "a9c2ab03-a21c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.204.112:47949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731542974, "uuid": "ba4f44a9-a21c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.27.31:40568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543013, "uuid": "d1d66bed-a21c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.6.97:41776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543127, "uuid": "15d23594-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/AkdijFa.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543127, "uuid": "16027da2-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/jidbAdp.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543129, "uuid": "16d21e95-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/Ifdjbdg.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543129, "uuid": "16fc6263-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/ndkpcdI.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "17621638-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/FjmrAAi.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "17987fb8-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/pFmrnFd.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543130, "uuid": "17a395e6-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/rmkrihk.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "reversed", "colour": "#173caa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543150, "uuid": "236956cb-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.27.172:51626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543313, "uuid": "84d7d086-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.215.250:47316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543315, "uuid": "85fb3ede-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.21.209:59712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543367, "uuid": "a510a8be-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.113.246:53024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543373, "uuid": "a8247644-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.219:60774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543426, "uuid": "c7fb5627-a21d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.247.208.187:2673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543545, "uuid": "0f1afeab-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.153:45090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543550, "uuid": "11a8a08d-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.128.155.87:54008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543550, "uuid": "11f4783c-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.240.88:51201/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543666, "uuid": "571eb76f-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.35.2:50664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543726, "uuid": "7ae7c874-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.66.42:52439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543848, "uuid": "c34f12c9-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.173.25:33958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543868, "uuid": "cfb1f5e4-a21e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.222.187:51970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731543966, "uuid": "09df3ef2-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.167.94:46034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544025, "uuid": "2d2d1f8e-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.8:39440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544034, "uuid": "329f932b-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.82:37680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544086, "uuid": "516cb684-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.197.70:44078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544236, "uuid": "aa886103-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.91.229:53846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544269, "uuid": "bea11ccf-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.242.106.35:36800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544329, "uuid": "e2196361-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.6.97:41776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544357, "uuid": "f308bc72-a21f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.37.29:39791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544445, "uuid": "27a14fcb-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.200.125:48364/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544446, "uuid": "27bfdb76-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.27.172:51626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544450, "uuid": "2a7a44f5-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.68.138:54460/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544465, "uuid": "32ffef0e-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.51.10:39980/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544506, "uuid": "4bc2a649-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.105.194.208:44719/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544507, "uuid": "4c15b5f5-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.67:41892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544567, "uuid": "700a47b9-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.91:53601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544686, "uuid": "b6b9e53b-a220-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.219:60774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544866, "uuid": "2270073f-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.247.208.187:2673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544925, "uuid": "45a0aba3-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116/Beefy.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544925, "uuid": "45b156a3-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.197.154.116/solandra.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731544986, "uuid": "6a0bfef4-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.225.120.145:45776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545049, "uuid": "8f25a1bc-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.153.179:35404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545110, "uuid": "b3823701-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.197.116:55416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545233, "uuid": "fd0c5131-a221-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.5.12:50456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545286, "uuid": "1cd3ecf3-a222-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.128.155.87:54008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545287, "uuid": "1d232fad-a222-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.180.99:35896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545346, "uuid": "4027120f-a222-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.58.100:36785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545416, "uuid": "69eff4d5-a222-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.114.5:60693/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545651, "uuid": "f601bf77-a222-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.25:45807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545765, "uuid": "3a1b8d9d-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.8:39440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545766, "uuid": "3a8f5bca-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/DRG/RTC/AR/F3dll.txt", "Tag": [ { "name": "AndeLoader", "colour": "#5BB544", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "3b64679b-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/DRG/RTC/AD/dll.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "3b7177d3-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/DRG/RTC/AB/f3dll.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "3b77fbbf-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/DRG/RTC/AC/f3dll.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545767, "uuid": "3b911f4b-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/ENVS/DS5.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545768, "uuid": "3bb28ad4-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/SH/Lma.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545889, "uuid": "8456766c-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.60:55289/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545891, "uuid": "85863da0-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.198.166:33797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731545946, "uuid": "a5fa6fd2-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.91.229:53846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546010, "uuid": "cc1f4b8d-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.3.242:33234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546010, "uuid": "cc27eb9c-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.225.219:50605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546066, "uuid": "ed9dde38-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.89.90.74:35157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546067, "uuid": "ee504acc-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.138.195.39/4700d1fcc2917f37/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546067, "uuid": "ee50d37e-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.138.195.39/4700d1fcc2917f37/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546068, "uuid": "eec1cc73-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.136/9eeb21db68649b6f/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546068, "uuid": "eef88072-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.136/9eeb21db68649b6f/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546069, "uuid": "ef93236d-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.235.128.145/4f21fd58a5ca1e4b/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546094, "uuid": "fe497444-a223-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.136/9eeb21db68649b6f/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546132, "uuid": "14b7bf19-a224-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.176.245:36095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546189, "uuid": "36c48ab9-a224-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.25:42556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546246, "uuid": "58e61b6d-a224-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.1.200:54636/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546426, "uuid": "c4212f03-a224-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.242.106.35:36800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546486, "uuid": "e7a907ca-a224-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.206.18.235:56606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546515, "uuid": "f964a132-a224-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.167.156:60835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546731, "uuid": "79c0903e-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.64.249:57231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546791, "uuid": "9d6898d0-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.174.29:36075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546808, "uuid": "a79bbf30-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.176:40688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546819, "uuid": "ae6468e7-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.210.190.92:41541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546845, "uuid": "bde90550-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://fish.hackbiji.cc/1.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546847, "uuid": "becc6ca3-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.206.18.235:56606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546851, "uuid": "c1aae071-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.16.241:41718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546907, "uuid": "e2a54771-a225-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.180.99:35896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731546994, "uuid": "1665ff1e-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.199:55772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547150, "uuid": "73f2b429-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.198.166:33797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547154, "uuid": "76580ee6-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.214:59809/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547209, "uuid": "96b2c98d-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.25:42556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547209, "uuid": "970ba58a-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.25:45807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547277, "uuid": "bf26ea39-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.44.42:40464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547335, "uuid": "e22861f7-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.52.140.43:45817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547385, "uuid": "ffd4c161-a226-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.58.100:36785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547459, "uuid": "2c11777b-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.114:58349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547507, "uuid": "4831f484-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.100.107:52958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547565, "uuid": "6b445089-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.3.242:33234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547691, "uuid": "b5f6d36b-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.155.244:44824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547763, "uuid": "e152a3c4-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.182.137:38151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547812, "uuid": "fe3b0385-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.16.241:41718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547812, "uuid": "fe8e3f2a-a227-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.137.203:59188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547929, "uuid": "441f4716-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.190:45644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547931, "uuid": "45561e54-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.167.156:60835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731547932, "uuid": "45c2859f-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.50.133:32808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548048, "uuid": "8af3cf81-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.125:47574/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548052, "uuid": "8d4c3f50-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.155.1:54272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548053, "uuid": "8e0736e4-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.161.214:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548167, "uuid": "d1abc7c5-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.39:49149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548167, "uuid": "d1f7555f-a228-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.190:45644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548286, "uuid": "1889d6ae-a229-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.76.242:54579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548297, "uuid": "1f73ec28-a229-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.210.190.92:41541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548408, "uuid": "61c0b333-a229-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.176:40688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548466, "uuid": "83e05197-a229-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.44.42:40464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548649, "uuid": "f141e150-a229-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.193.9:54205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548708, "uuid": "14229a5e-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.154.49:33519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548766, "uuid": "36d5f7c5-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.155.1:54272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731548958, "uuid": "a94a8a1b-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.52.140.43:45817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549008, "uuid": "c704c894-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.114:58349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549008, "uuid": "c74f3363-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.69:50937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549010, "uuid": "c89c5b4e-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.77:38233/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549034, "uuid": "d69f7f03-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.170.226:34952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549066, "uuid": "e99a2ea7-a22a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.155.244:44824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549312, "uuid": "7c2e94bb-a22b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.21.174.33:41333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549545, "uuid": "077bf6f4-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.182.137:38151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549561, "uuid": "10a0fbc0-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.10.147:46093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549611, "uuid": "2e5e02c2-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.50.133:32808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549667, "uuid": "4fa1c2ed-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.137.203:59188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549786, "uuid": "96e22be7-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.160.110:55630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549791, "uuid": "99de42b4-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.86.245:39951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549845, "uuid": "ba3c5176-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.160.220:55838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549846, "uuid": "ba9b4f61-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.253:51409/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549862, "uuid": "c420fb1c-a22c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.216.164:56665/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731549966, "uuid": "0213ae97-a22d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.193.9:54205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550025, "uuid": "258df0ae-a22d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.160.110:55630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550026, "uuid": "25e3300c-a22d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.111:47040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550026, "uuid": "2615c128-a22d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.142.3:46517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550086, "uuid": "49daae18-a22d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.154.49:33519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550209, "uuid": "92d36ea0-a22d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.60:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550446, "uuid": "2068503d-a22e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.239.249:51250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550575, "uuid": "6cdad841-a22e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.122.112.140:41158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550673, "uuid": "a7478767-a22e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.215.178:44831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550687, "uuid": "afa02c1c-a22e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.24:57174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550751, "uuid": "d655af3b-a22e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.218.234:54831/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550836, "uuid": "08cbf073-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.233.74:59534/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550836, "uuid": "08cd2162-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.212.111.157:56641/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550836, "uuid": "08cd87be-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.12.131:39494/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550926, "uuid": "3e175cad-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://dwqjh.cloudid.teacherhamish.com/gotoCheckout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731550988, "uuid": "637b2b7e-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.40:47056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551047, "uuid": "86a7848e-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.37.147:39293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551112, "uuid": "ad401537-a22f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.84.88:35933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551346, "uuid": "38d87a93-a230-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.228.52:48198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551351, "uuid": "3bba5fd8-a230-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.215.125:58525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551414, "uuid": "613a7e84-a230-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.159.205:35437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551655, "uuid": "f0c40007-a230-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.173.0:54196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551711, "uuid": "121a2dd3-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.185.117:57098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551711, "uuid": "1269845f-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.40.246:47067/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551715, "uuid": "14df4bdc-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.212.11:35831/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551827, "uuid": "575abf42-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.39.244:32832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551827, "uuid": "575d25a1-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.235.11:35547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551827, "uuid": "577507ae-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.122.112.140:41158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551886, "uuid": "7aad277b-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.121.3.50:56326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551914, "uuid": "8b1a9f2e-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.75.89:56682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731551946, "uuid": "9e6f2c1b-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.245.2.100:35553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552010, "uuid": "c42fcaa5-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.103.102:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552066, "uuid": "e6197810-a231-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.3:49203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552201, "uuid": "360c3748-a232-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.200.200:37842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552246, "uuid": "516587da-a232-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.150.107:58456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552308, "uuid": "75d5ad72-a232-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.215.178:44831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552367, "uuid": "99102a53-a232-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.77.169:57301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552426, "uuid": "bc9ab819-a232-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.235.11:35547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552608, "uuid": "28cb78e2-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.47:44129/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552608, "uuid": "292961bc-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.159.205:35437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552609, "uuid": "298c6343-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.102:45534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552667, "uuid": "4c1e53ae-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.37.147:39293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552726, "uuid": "6f53f1c9-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.251.132:57583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552854, "uuid": "bb952928-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.247:53439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552907, "uuid": "dae64352-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.84.88:35933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731552966, "uuid": "fe1f0565-a233-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.126.171:55963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553086, "uuid": "45dc0954-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.185.117:57098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553086, "uuid": "45ffa534-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.215.125:58525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553147, "uuid": "6a027607-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.9.249:50109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553211, "uuid": "900a70de-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.11:53480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553267, "uuid": "b1e66a8b-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.3.112:52581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553268, "uuid": "b2026d7e-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.173.0:54196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553326, "uuid": "d513e1d6-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.79.241:47229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553386, "uuid": "f8dcdd4a-a234-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.0.102:45534/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553448, "uuid": "1ddb9e77-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.198:46512/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553507, "uuid": "40c6f7ab-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.39.244:32832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553566, "uuid": "642cb368-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:46544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553567, "uuid": "6437c5e8-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.17:34875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553626, "uuid": "87b2b447-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.15.165:44777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553630, "uuid": "89d02667-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.83.254:55920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553821, "uuid": "fc1c28b4-a235-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.119:53939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553925, "uuid": "39ebfa5f-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.227.217:51508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731553931, "uuid": "3d3002f0-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.34.1:50449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554032, "uuid": "797ab7aa-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.112.32:49070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554046, "uuid": "81bf7d78-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.3:49203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554046, "uuid": "81d4fc04-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.150.107:58456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554046, "uuid": "8206e71f-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.247:53439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554171, "uuid": "cc7bb5bf-a236-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.55.178:47029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554302, "uuid": "1abe7242-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.187:36683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554352, "uuid": "387aa418-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.147:58447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554353, "uuid": "38cd9ea4-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.210.224.5:60181/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554409, "uuid": "5a72f5a8-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.62.3.144:3264/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554409, "uuid": "5a7c09e7-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.93.44.86:41751/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554467, "uuid": "7d021bc6-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.251.132:57583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554469, "uuid": "7e5d6a18-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.41.94:50994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554470, "uuid": "7e94b7ce-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.236.234:42788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554526, "uuid": "a02357db-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.13.195:60465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554586, "uuid": "c3e6c8f0-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:46544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554606, "uuid": "cfa003f8-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.94.47:56916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554646, "uuid": "e7e47779-a237-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.197.70:44078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554708, "uuid": "0cc0b73e-a238-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.13.165:51633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554826, "uuid": "52dda6d1-a238-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.206:60487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731554826, "uuid": "5304e0af-a238-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.9.249:50109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555249, "uuid": "4f27ec58-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.15.165:44777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555249, "uuid": "4f423191-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.82.227.220:36472/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555249, "uuid": "4f5313db-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.182:38171/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555249, "uuid": "4f58d85c-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.122.76:59441/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555255, "uuid": "5270692e-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.177.102:48816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555255, "uuid": "528adbc1-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.110:55807/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555255, "uuid": "5299658b-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.88.195:36001/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555270, "uuid": "5bb0496c-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.34.195:56817/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555426, "uuid": "b87f312a-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.227.217:51508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555486, "uuid": "dc48784d-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.218.187:58481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555546, "uuid": "ffd61109-a239-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.215.250:47316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555608, "uuid": "24fecba3-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.13.195:60465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555665, "uuid": "46c8b8da-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.103/qkbfi86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555665, "uuid": "46ff693a-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.55.178:47029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555665, "uuid": "470e434f-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.228:54257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555726, "uuid": "6b794551-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.91:34788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555785, "uuid": "8ec2a816-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.119:53939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555786, "uuid": "8ee6b580-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.77.19:53745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731555907, "uuid": "d6f94229-a23a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.66.189:50940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556208, "uuid": "8a69681d-a23b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.41.94:50994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556311, "uuid": "c7edef7d-a23b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.43:34531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556445, "uuid": "180512c1-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.17:34875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556445, "uuid": "182f0d3c-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.158.47:37213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556626, "uuid": "83b91a18-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.181.237.235:56983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556702, "uuid": "b11fcc3b-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.14:45213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556704, "uuid": "b2595f0a-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.66.37:47095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556745, "uuid": "caa360e9-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.239.77.159:37093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556811, "uuid": "f1fb9685-a23c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.26:41959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556929, "uuid": "38865ef9-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/lum250.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556935, "uuid": "3c39a9b5-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://quit.do.am/abcd/09.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556944, "uuid": "41870185-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/babababa.exe", "Tag": [ { "name": "cstealer", "colour": "#21c3b8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556986, "uuid": "5a6a627f-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.202:52755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556986, "uuid": "5a8862f2-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.235.205:50864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731556987, "uuid": "5ac80b48-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.89:46791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557005, "uuid": "6594fc11-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.197:41348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557047, "uuid": "7ec8912f-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.109.15:58768/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557066, "uuid": "8a153784-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.154.202:53582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557166, "uuid": "c5ea859f-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.122.9:45619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557226, "uuid": "e95d7f40-a23d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.77.19:53745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557466, "uuid": "789b9e80-a23e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.219:37627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557467, "uuid": "7918529c-a23e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.147:58447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557471, "uuid": "7b9b5a20-a23e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.159.71.249:37040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557473, "uuid": "7c64bff4-a23e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.219.82:40712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557708, "uuid": "0881ce24-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.43:34531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557768, "uuid": "2c88527c-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.229:52044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557825, "uuid": "4eae657c-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.158.47:37213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557849, "uuid": "5c9d24b7-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.129:59938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557945, "uuid": "962a23ab-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.66.189:50940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731557948, "uuid": "98149853-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.224.216:43021/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558007, "uuid": "baf33803-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.133:39100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558007, "uuid": "baf78d80-a23f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.148.252:55549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558247, "uuid": "49c295f0-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.212.103:53849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558249, "uuid": "4b38beff-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.49.221:44282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558308, "uuid": "6e2c4938-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.87.59:40128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558366, "uuid": "90abda50-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.11:53480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558429, "uuid": "b6344853-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.122.137:60183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558485, "uuid": "d825a63e-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.239.77.159:37093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558545, "uuid": "fbc0d75a-a240-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.66.37:47095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558678, "uuid": "4b088e87-a241-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.2:37992/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558681, "uuid": "4c7036ba-a241-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.23.215:59035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558789, "uuid": "8d04e86b-a241-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.219:37627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558851, "uuid": "b1e2a65f-a241-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.1.242:58772/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558909, "uuid": "d48c6172-a241-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.91:34788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731558909, "uuid": "d4a9cb86-a241-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.202:52755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559147, "uuid": "622b3c0d-a242-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.161.75.104:40947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559266, "uuid": "a9280dce-a242-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.61.57:49562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559267, "uuid": "a9e411aa-a242-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.246.69.226:56192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559386, "uuid": "f0df18cf-a242-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.187.115:36279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559566, "uuid": "5c4f90a0-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.192:49100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559626, "uuid": "8004966a-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.159.71.249:37040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559627, "uuid": "80565be8-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.229:52044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559746, "uuid": "c771d6ce-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.23.215:59035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559746, "uuid": "c791bb81-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.77.162:60019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559750, "uuid": "ca1cd76d-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.230.114:45746/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559808, "uuid": "ec833092-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.58.53:44879/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559808, "uuid": "ec8395d1-a243-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.33:59849/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559942, "uuid": "3c4f9020-a244-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.212.103:53849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559944, "uuid": "3d4593d5-a244-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.240:38819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731559989, "uuid": "587b1fde-a244-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.100.174.70:39298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560046, "uuid": "7a636726-a244-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.122.137:60183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560107, "uuid": "9ea6352a-a244-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.196.144:40849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560247, "uuid": "f1fb320d-a244-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.208.153:59344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560411, "uuid": "53b51368-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.245.220:43616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560467, "uuid": "752fbc2b-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.139.218:52214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560473, "uuid": "788c7947-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.18.212:39845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560586, "uuid": "bc528cb6-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.64.214:53883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560647, "uuid": "e05eeb14-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.77:51506/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560647, "uuid": "e0b914e0-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.34.235:35966/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560649, "uuid": "e19f3e2d-a245-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.175.11:33740/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560765, "uuid": "27235dfe-a246-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.42.139:47536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731560766, "uuid": "27386c61-a246-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.192:49100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561031, "uuid": "c5471a04-a246-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.250.93:34310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561068, "uuid": "db9610de-a246-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.117.12:35061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561251, "uuid": "4848aa0c-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.20.10:37592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561309, "uuid": "6ad2af27-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.179.236:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561366, "uuid": "8d08362b-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.218.234:54831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561367, "uuid": "8d84e6fb-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.161.75.104:40947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561426, "uuid": "b09d432e-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.34.1:50449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561502, "uuid": "de66c388-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.240:38819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561547, "uuid": "f8b1e6b4-a247-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.217.95.89:56047/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731561726, "uuid": "63f00afe-a248-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.245.220:43616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562026, "uuid": "16ac5528-a249-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.254:51020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562277, "uuid": "ac42679e-a249-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.205.15:41371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562450, "uuid": "13022335-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.223.231:40357/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562450, "uuid": "1346b152-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.101:55138/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562453, "uuid": "14b2f437-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.23.119:57159/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562638, "uuid": "83040f4b-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.150.75.234:46028/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562687, "uuid": "a0afe713-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.218.234:54831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562746, "uuid": "c3dd2b72-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.20.10:37592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562747, "uuid": "c3efda10-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.69:50937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562747, "uuid": "c45b0140-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.211.0:42569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562808, "uuid": "e8df08ff-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.251.76:60188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562810, "uuid": "ea0d029d-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.14.31:39513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562821, "uuid": "f070141c-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.183:44817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562823, "uuid": "f162a854-a24a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.240.153:54911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562867, "uuid": "0bb14fc4-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.18.144:48384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562868, "uuid": "0c0dc0e5-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.102.84:41217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562926, "uuid": "2ed8c252-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.39.231:39921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731562926, "uuid": "2f29bf89-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.18.212:39845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563046, "uuid": "76752d2d-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.250.93:34310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563051, "uuid": "792cfc29-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.220:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563108, "uuid": "9ba6e408-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.254:51020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563127, "uuid": "a68fd419-a24b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.159:48938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563364, "uuid": "3415c966-a24c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.26:60901/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563586, "uuid": "b83c93f7-a24c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.213.69.62:39614/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563644, "uuid": "db1d138e-a24c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.64.214:53883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563707, "uuid": "009863d6-a24d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.207:60704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563794, "uuid": "347d2ac3-a24d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.223.165:58470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563962, "uuid": "98356bca-a24d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.203:33952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731563965, "uuid": "9a15ee8d-a24d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.50.32:46517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564009, "uuid": "b4738eb3-a24d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.41.209:38196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564067, "uuid": "d70306a9-a24d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/R00tS3c/DDOS-RootSec/refs/heads/master/DDOS%20Scripts/L4/UDP/10gbpsUDP.py", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564191, "uuid": "21017c85-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.80.175:56135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564192, "uuid": "2173ccae-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.165.65:39038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564247, "uuid": "422985f9-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.14.31:39513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564307, "uuid": "663863d3-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.126.114:51837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564314, "uuid": "6a2137d9-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.160.25:49925/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564315, "uuid": "6a8ff46c-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.154.137:32865/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564367, "uuid": "8987a877-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.89.71:44561/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564367, "uuid": "89c0b0ca-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.86.138:34006/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564431, "uuid": "b023e20a-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.69.85:59974/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564486, "uuid": "d0c875bc-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.80.175:56135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564546, "uuid": "f4c9dc4e-a24e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.228.178:37873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564726, "uuid": "5fe4caa0-a24f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.4.120:52396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564846, "uuid": "a707ed85-a24f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.148.252:55549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731564967, "uuid": "ef3a8cf7-a24f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.25.159:48938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565025, "uuid": "122f45b9-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:60665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565087, "uuid": "36f5d607-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.229.45:50421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565147, "uuid": "5aa78c94-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.219:60774/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565150, "uuid": "5c7ee05c-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.4:45729/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565208, "uuid": "7f1bedf3-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=16XIsQuley2kQy-0GJDMPW9g6MKDFELSV", "Tag": [ { "name": "02165", "colour": "#625693", "exportable": true, "hide_tag": false }, { "name": "pw-02165", "colour": "#cc3731", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565208, "uuid": "7f2183d8-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs.google.com/uc?export=download&id=1eoMYYkN5uhCvTT3ruS5vQJIn7WEB-e1q", "Tag": [ { "name": "1425", "colour": "#aa41a8", "exportable": true, "hide_tag": false }, { "name": "pw-1425", "colour": "#f34dc4", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565208, "uuid": "7f46f08e-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs.google.com/uc?export=download&id=1wC6il7HV9_f2kYcpkCLTgK89OqZy6nL4", "Tag": [ { "name": "6578", "colour": "#e2f24b", "exportable": true, "hide_tag": false }, { "name": "pw-6578", "colour": "#9af796", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565209, "uuid": "7f844e61-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs.google.com/uc?export=download&id=1Qehwy7iYzBZPlaLFb_6H10CTyxNqoxq0", "Tag": [ { "name": "8860", "colour": "#8c2126", "exportable": true, "hide_tag": false }, { "name": "pw-8860", "colour": "#9c1e45", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565209, "uuid": "7f847033-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs.google.com/uc?export=download&id=1uF-tzNOzEoKHrzTJvFoXMsfD1XIHa_pK", "Tag": [ { "name": "2589", "colour": "#7abb8c", "exportable": true, "hide_tag": false }, { "name": "pw-2589", "colour": "#9a15f2", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565209, "uuid": "7fd0d32e-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?id=16WV9mNFwgO7cXzIpNwTATuc7uIfJXjYk&export=download&authuser=0", "Tag": [ { "name": "112024", "colour": "#8bab5a", "exportable": true, "hide_tag": false }, { "name": "pw-112024", "colour": "#a03e7c", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565209, "uuid": "7ff3a77c-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.9.178:48465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565237, "uuid": "906a8638-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.106.191.218/8bed3CS/Plugins/cred.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565238, "uuid": "90c52b94-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.71.194.40/6.exe", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565269, "uuid": "a3a9c865-a250-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.download.pdfforge.org/op/op.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565523, "uuid": "3b1e410b-a251-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.200.27:59498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565766, "uuid": "cba21985-a251-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.253.121:50487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565874, "uuid": "0c0941b7-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.76.157:55023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731565989, "uuid": "50da39c9-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.50.32:46517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566050, "uuid": "74b074ef-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.44.42:60140/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566109, "uuid": "985342fa-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.229.115:34778/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566109, "uuid": "985e1ccf-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.31:39681/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566110, "uuid": "98b03b68-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.186.52.185:45773/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566110, "uuid": "98bb3aef-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.205.15:41371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566153, "uuid": "b25e7cab-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.73:33353/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566227, "uuid": "deb25ef3-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.20.134:34719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566227, "uuid": "debfbcc8-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.165.65:39038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566229, "uuid": "dfb78abf-a252-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.153.143.173:33458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566408, "uuid": "4a43e92d-a253-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.223.82:59112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566532, "uuid": "941637fe-a253-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.75.28:38688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566766, "uuid": "1fedc39a-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.229.45:50421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566829, "uuid": "450d9b68-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.152.231:34680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566886, "uuid": "6725ac4f-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.109.168/xmxdJZpGdTJvVTsKBP182.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566886, "uuid": "673a2fab-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.109.168/aqffLTJU37.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566887, "uuid": "679aa7b8-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.199:48159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731566887, "uuid": "67cbf505-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.168.32.140/hgzYyfcbupQbJOAKN230.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567074, "uuid": "d756a79c-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.209.242:33552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567128, "uuid": "f77f5bcd-a254-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.165.236:49577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567185, "uuid": "19998ffa-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.200.27:59498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567249, "uuid": "3f88e6df-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.182.103:40326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567306, "uuid": "617c3cb0-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.203.201:56829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567306, "uuid": "61828570-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.229.115:34778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567424, "uuid": "a7eb778d-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.131/infopage/tbh75.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "ccbb5f9e-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.31.243:38643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "cd17bc4c-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.112.194/spoof.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567486, "uuid": "cd202435-a255-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.112.194/injector.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567608, "uuid": "1596db8f-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.216:43006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567609, "uuid": "1662da9c-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.118.45:58003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567610, "uuid": "16c1aa68-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.75.28:38688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567726, "uuid": "5bd86a52-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.165.236:49577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567726, "uuid": "5be0fc03-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.60:55289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567851, "uuid": "a64a4d0f-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.250.75:60586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731567907, "uuid": "c79447e9-a256-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.225.106:42503/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568025, "uuid": "0e476002-a257-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.123.238.38:39665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568026, "uuid": "0e95dc0f-a257-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.228.178:37873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568230, "uuid": "885432ef-a257-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.249.20:51912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568269, "uuid": "9f4ac82a-a257-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.93.134:56362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568327, "uuid": "c20349ed-a257-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.128.146:48486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568385, "uuid": "e4a90b04-a257-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.152.231:34680/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568507, "uuid": "2d468d76-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.20.134:34719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568507, "uuid": "2d6c4f2a-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.84.39/txt/xXdquUOrM1vD3An.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568512, "uuid": "30a374d6-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/gC9RL/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568595, "uuid": "61b0d51c-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.138.247:58754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568626, "uuid": "7419689a-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.203.201:56829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568626, "uuid": "7464f292-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.209.242:33552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568746, "uuid": "bc09d39b-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.183:44817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568746, "uuid": "bc305f87-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.15.169:39084/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568808, "uuid": "e0a6e439-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.116.14:60343/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568812, "uuid": "e365fad4-a258-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.11.253:39278/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731568985, "uuid": "4a9508b6-a259-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.160.220:55838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569345, "uuid": "20ef40fe-a25a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.118.45:58003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569531, "uuid": "8fde614c-a25a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.94.109:49809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569534, "uuid": "915b9a00-a25a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.8.18:34805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569709, "uuid": "f9dbff80-a25a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.12.91:46488/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569726, "uuid": "04383d09-a25b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.30.181:55426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569765, "uuid": "1b3ebc1c-a25b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.119.93:57715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731569951, "uuid": "8a28a50d-a25b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.72.71.236:52968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570008, "uuid": "ac022b77-a25b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.105.24:58073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570009, "uuid": "ac6cfb6f-a25b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.93.134:56362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570189, "uuid": "180d353d-a25c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.224.128:38049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570253, "uuid": "3dda21d5-a25c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.245.117:57149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570443, "uuid": "af5e59eb-a25c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.215.235:49506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570491, "uuid": "cc46c2ce-a25c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.84.95.139:39550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570545, "uuid": "ec6a216d-a25c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.185:37780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570572, "uuid": "fc2c7fc4-a25c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.131.166:43080/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570608, "uuid": "11b2660d-a25d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.161.75.104:40947/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570610, "uuid": "12d450b8-a25d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.240:51403/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570786, "uuid": "7ba428f0-a25d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.30.181:55426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731570906, "uuid": "c37bdde6-a25d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.8.18:34805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571030, "uuid": "0d16b60c-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.37.3:222/g5bbapVsvPgnwnVhFgSf.jpg", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571034, "uuid": "0fe07f1d-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.37.3:222/ergrbcgvwefeycdfr.jpg", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571084, "uuid": "2d7ce541-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.37.3:222/tt001010100100101000100010111010010101000101.txt", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571087, "uuid": "2f403b79-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.243.37.3:222/svvgtbyunyfyhvrtctyujkdsgggvthbyb.txt", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571154, "uuid": "572b3248-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.253:60181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571326, "uuid": "bdb37bcd-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.202.65:36864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571341, "uuid": "c675bbb4-a25e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.106.158:42171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571446, "uuid": "05056d75-a25f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.232.44:58070/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571454, "uuid": "09b7b82c-a25f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.226.123:55682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571454, "uuid": "0a2c645e-a25f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.10.223:44204/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571464, "uuid": "0fbc8203-a25f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.35:46111/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571508, "uuid": "2a2b999a-a25f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.232.178:40854/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731571746, "uuid": "b8551dd7-a25f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.86.183.76:37311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572319, "uuid": "0dc02ff8-a261-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.36.3:55575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572588, "uuid": "ae1f8445-a261-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/obfuscated25.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572606, "uuid": "b8678d6a-a261-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.187.162:57676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572712, "uuid": "f7da8ab1-a261-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.36.66:57834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731572828, "uuid": "3d2ba54e-a262-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.120.249:41120/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573069, "uuid": "ccd6512c-a262-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.89.71:44561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573129, "uuid": "f0926af6-a262-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.2.3:53581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573246, "uuid": "35e332a7-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:53547/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573247, "uuid": "36d5c895-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.66.110:40943/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573247, "uuid": "36fda51e-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.81.151.219:60664/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573250, "uuid": "38334c3a-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.14:60375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573252, "uuid": "39a6af24-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.146.64:36487/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573427, "uuid": "a1d2ed9b-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.120.249:41120/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573493, "uuid": "c95ff2c2-a263-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.19.200:46780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573666, "uuid": "303da2b0-a264-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.86.183.76:37311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573669, "uuid": "32246bc5-a264-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.47:44129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573790, "uuid": "7a9e87c8-a264-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.215.195:59392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573967, "uuid": "e3d4799e-a264-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.16.62:41899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731573967, "uuid": "e3ef4838-a264-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.88.71:34905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574026, "uuid": "075027f2-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.36.66:57834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574146, "uuid": "4e6e73a9-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.240:45593/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574146, "uuid": "4ec6ee10-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.182.122:44838/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574209, "uuid": "73f1b2bf-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.229.45:50421/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574209, "uuid": "741ea8c5-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.244.203.24:34097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574212, "uuid": "759c60d8-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.229.189:52493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574265, "uuid": "95b72250-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.89.71:44561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574266, "uuid": "95dbc8b7-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.245.80:59504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574266, "uuid": "95e7677b-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.187.162:57676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574286, "uuid": "a1e1a6d9-a265-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.125.66.103/old/iwir64", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574507, "uuid": "258e16ae-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.90.128:41412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574573, "uuid": "4cc945fe-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.63:43866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574686, "uuid": "909903cd-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.123:36902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574716, "uuid": "a249170d-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.27.145:48231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574745, "uuid": "b3ca0263-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.68.247:53763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574751, "uuid": "b6fb4474-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.182.77:58238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574809, "uuid": "da031b68-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.63:43866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574869, "uuid": "fd49a679-a266-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.88.245:50028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731574986, "uuid": "4361a56e-a267-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.249.47:44129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575045, "uuid": "666bc319-a267-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.10.161:56562/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575048, "uuid": "6839c22f-a267-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.164.101:47977/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575111, "uuid": "8dd15af9-a267-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.41.75:22682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575286, "uuid": "f604357d-a267-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.100.107:52958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575345, "uuid": "197faa5f-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.21.121:50907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575409, "uuid": "3f19fe60-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.215.195:59392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575591, "uuid": "abb10679-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.241.140/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575594, "uuid": "ad6eaa67-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi2145130.contaboserver.net/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575599, "uuid": "b0b01534-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.75.142.232/Video.scr", "Tag": [ { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575604, "uuid": "b3650959-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi2145130.contaboserver.net/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575604, "uuid": "b38c8a31-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.190.254:8888/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575604, "uuid": "b390a87c-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.200.171:8888/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575604, "uuid": "b3d6650a-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.200.171:8888/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575605, "uuid": "b3fb3c3f-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.52:81/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575605, "uuid": "b4473076-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps-d21ef853.vps.ovh.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575605, "uuid": "b455685e-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.52:81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575606, "uuid": "b4b3c7b5-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.59:81/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575606, "uuid": "b4f3ee43-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.75.142.232/AV.scr", "Tag": [ { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575609, "uuid": "b6c1023a-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.206.52.179:8899/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575618, "uuid": "bbb540ca-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.59:81/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575620, "uuid": "bd4f583c-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.241.140/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575621, "uuid": "bd9c6f3c-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.59:81/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575621, "uuid": "bdca1b62-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.206.52.179:8899/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575621, "uuid": "bdcab4ea-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.206.52.179:8899/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575622, "uuid": "be1cda1a-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.52:81/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575622, "uuid": "be1f0492-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi2145130.contaboserver.net/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575623, "uuid": "becc8ad3-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.75.142.232/Photo.scr", "Tag": [ { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575624, "uuid": "bf35c77d-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps-d21ef853.vps.ovh.net/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575624, "uuid": "bf80f058-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.190.254:8888/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575624, "uuid": "bf824246-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps-d21ef853.vps.ovh.net/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575624, "uuid": "bf864cb8-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.190.254:8888/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575625, "uuid": "c00e54af-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.200.171:8888/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575625, "uuid": "c016107d-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.241.140/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575658, "uuid": "d3f2599f-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/info.zip", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575713, "uuid": "f4d07818-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575714, "uuid": "f5277b3c-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731575714, "uuid": "f5398780-a268-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576164, "uuid": "017fc408-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.115.131.110:8085/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576194, "uuid": "1383d7a6-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.222.173.104:8085/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576243, "uuid": "3081455f-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.222.173.104:8085/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576268, "uuid": "3f79739e-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.229.165:8085/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576280, "uuid": "46394659-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.229.165:8085/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576286, "uuid": "4a5198a4-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.222.173.104:8085/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576290, "uuid": "4c85470f-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.231.115:8085/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576315, "uuid": "5b5e005a-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.115.131.110:8085/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576316, "uuid": "5bdb7885-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.231.115:8085/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576528, "uuid": "da31047f-a26a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.229.165:8085/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731576670, "uuid": "2f36f3a3-a26b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.231.115:8085/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577019, "uuid": "feeb2007-a26b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.115.131.110:8085/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577026, "uuid": "02facf11-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.75.142.232/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577026, "uuid": "030b5329-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.75.142.232/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577029, "uuid": "05158bd8-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.190.254:8888/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "056a2a54-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.241.140/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "057d78c8-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps-d21ef853.vps.ovh.net/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "058bc411-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.59:81/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "058ea700-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.88.195:36001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "05959c63-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.68.224:43211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "059885df-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.182.77:58238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "059d41b6-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.59:81/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "059f06c3-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.190.254:8888/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "05a211cd-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi2145130.contaboserver.net/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "05a255a6-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.68.224:43211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "05a4033a-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.229.189:52493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "05a4b250-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.206.52.179:8899/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577030, "uuid": "05bd0c69-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.206.52.179:8899/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05dc4165-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05dc9c37-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.200.171:8888/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05dcc8b9-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.59:81/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05de9e4e-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.190.254:8888/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05dfb4af-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.52:81/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05e70bf2-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps-d21ef853.vps.ovh.net/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05ec4ff3-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.222.173.104:8085/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05ef5418-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vps-d21ef853.vps.ovh.net/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05efb0dd-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.206.52.179:8899/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "05f72bc4-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.229.165:8085/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "060b6fc2-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.53.98.8:51939/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "060f74ba-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.115.131.110:8085/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "060f84af-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.115.131.110:8085/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "0628641f-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.231.115:8085/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577031, "uuid": "065e3380-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577034, "uuid": "07a861ea-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi2145130.contaboserver.net/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577034, "uuid": "081da66d-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.241.140/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "083eb5a2-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi2145130.contaboserver.net/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "08454fc3-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.52:81/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "084ad649-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.202.184:82/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "0852f2c8-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:60665/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "085d6e12-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.52:81/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "0864d8c4-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.222.173.104:8085/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "08694e71-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.115.131.110:8085/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "086bbc6a-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.200.171:8888/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "0874d861-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.41.75:22682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "087b90c4-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.35:40643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "087e5d2a-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.229.165:8085/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "087e616e-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.210:43931/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "088fb21d-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.200.171:8888/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577035, "uuid": "08a16753-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.231.115:8085/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577036, "uuid": "0918dbe9-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.171.238:50855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577038, "uuid": "0a4bce7f-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.222.173.104:8085/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577040, "uuid": "0b6741db-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.231.115:8085/AV.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577047, "uuid": "0f7989e0-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.220.16:52078/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577049, "uuid": "10b7188a-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.33.229.165:8085/Photo.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577055, "uuid": "14495e8e-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.133.216:39144/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577055, "uuid": "148feca6-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.179:45632/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577058, "uuid": "1654e5d3-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.112.105:52883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577059, "uuid": "16d96246-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.127.141:55261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577077, "uuid": "21625d9b-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.246.181:37169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577085, "uuid": "2666a5cc-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.241.140/Video.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577091, "uuid": "29ed1f6a-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.125.149:53206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577171, "uuid": "59d9cad9-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.216.1:60541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577328, "uuid": "b73039d0-a26c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.41:48647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577567, "uuid": "4559c57e-a26d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.207:60704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577574, "uuid": "499521e1-a26d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.139.84:37168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577747, "uuid": "b0bc75a5-a26d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.178.150:53910/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577751, "uuid": "b349eb75-a26d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.47.68:58420/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577767, "uuid": "bcfb0a0b-a26d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.44.36:57538/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577768, "uuid": "bda999c2-a26d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.10.116:33005/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577987, "uuid": "400256c1-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.241.48.205:15646/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731577988, "uuid": "405518ff-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.246.69.226:56192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "7375dccb-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/totallysafe1.ps1", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "7375e0fa-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/stage1.ps1", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "73766627-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/off.ps1", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "73766ae5-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/totallysafe2.ps1", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "737707f4-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/totallysafe.msi", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "7377144b-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/crypt.sh", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578073, "uuid": "7377b827-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.81.124.24/totallysafe.ps1", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578106, "uuid": "8714f7b2-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.88.195:36001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578111, "uuid": "8a0c2943-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.55.179:47550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578286, "uuid": "f27a9d41-a26e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.35:40643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578527, "uuid": "818a2eca-a26f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.170:36141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578529, "uuid": "830b068e-a26f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.137.0.22:44811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578647, "uuid": "c944709c-a26f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.158.127:34358/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578708, "uuid": "ed89b8ea-a26f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.238.146:58843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731578946, "uuid": "7b899f38-a270-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.216.1:60541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579066, "uuid": "c3091b45-a270-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.210.229:55103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579126, "uuid": "e721e9fd-a270-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.139.84:37168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579128, "uuid": "e7e621db-a270-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://store6.gofile.io/download/direct/bea84ef0-a7bf-421f-960c-ed3d3c21dfa7/Pawyvstri.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579311, "uuid": "554192ee-a271-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.8.254:52759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579570, "uuid": "ef721aa9-a271-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.8:56014/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "088b5e5c-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "088be75a-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "0893676c-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "089713a9-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "089bc182-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "089f1bc9-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "08a27393-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "08a2f6bc-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "08a3c7db-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "08a48e75-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579612, "uuid": "08a69f4e-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "08dfba76-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "08dfc177-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "08ea4243-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "08eb9b90-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "0912f5ee-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579613, "uuid": "0934c422-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579614, "uuid": "0979b8d3-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://sg-singapore.allsafevpn.com/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579637, "uuid": "178096c4-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.60.13:42303/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579667, "uuid": "2960c336-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579667, "uuid": "2996d7f4-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://15.235.149.58/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579966, "uuid": "db73ae51-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.242.169:47923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731579968, "uuid": "dcbd801e-a272-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.193.212:36600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580086, "uuid": "2328357c-a273-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.153.91.122:55400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580086, "uuid": "2339b805-a273-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.191:45477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580216, "uuid": "7061cdf1-a273-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.dropbox.com/scl/fi/ethz4ras5vj7pyq9udz83/laudobombeirospdf.msi?rlkey=aw3azigq5haqd3e4fyck1nyob&st=l7sauzxm&dl=1", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580334, "uuid": "b6fe775f-a273-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.93.222:33809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580410, "uuid": "e3f7ffb2-a273-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.43:55937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580507, "uuid": "1e3e8f90-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.213.41:48647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580541, "uuid": "325a2090-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mspa-constabulary.org/Alertswiss_bind_sign.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "coper", "colour": "#d1a52a", "exportable": true, "hide_tag": false }, { "name": "octa", "colour": "#3a2375", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580566, "uuid": "41697664-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.210.229:55103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580807, "uuid": "d0e6d19c-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.159:36892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580807, "uuid": "d118f63e-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.137.0.22:44811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580865, "uuid": "f35a49c6-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.176.245:36095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580865, "uuid": "f35ed04a-a274-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.170.37.201:52499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580929, "uuid": "194cd41b-a275-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.165.75:59252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731580929, "uuid": "196ade52-a275-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://njprfirm.com/burgi.zip", "Tag": [ { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581167, "uuid": "a781fbe2-a275-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.226.193:35311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581346, "uuid": "121505a4-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.123.238.38:39665/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581361, "uuid": "1b267420-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.46.181:43791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581410, "uuid": "3872b77e-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.228.146:38880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581466, "uuid": "5987c97b-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.220.75:38330/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581707, "uuid": "e8fdb358-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.228.146:38880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581710, "uuid": "eb553bdb-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.8.175:33351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581713, "uuid": "ec8b0335-a276-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.199.2:40565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581831, "uuid": "330c9869-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-salchechon.com/burgi.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731581945, "uuid": "776989c0-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bugijepakx1c.b-cdn.net/bambo/fijibo.txt", "Tag": [ { "name": "rel1gitiger-cyou", "colour": "#4c05d5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582015, "uuid": "a0a1de30-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.108.231:42930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582068, "uuid": "c0b2366e-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.29.237.232:81/min.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "c0bc9e7d-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.215.136.198/x/2sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582069, "uuid": "c0d5355e-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.202.35.17/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582070, "uuid": "c16f2a44-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.215.136.198/x/3sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582070, "uuid": "c17a46ff-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582070, "uuid": "c1c008cd-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.96.136.133/cARM", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582073, "uuid": "c321c637-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.96.136.133/sshell.service", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582073, "uuid": "c325d529-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.208/java", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582073, "uuid": "c325de9c-a277-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.121.142.188/min.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582265, "uuid": "35a81ff3-a278-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.168.128:46551/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582274, "uuid": "3b6d91ed-a278-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.96.51:60976/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582374, "uuid": "7694697d-a278-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.172.167:59596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582429, "uuid": "97a5f63b-a278-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.98.201.248:81/pro2.jpg", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582608, "uuid": "028b3307-a279-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.159:36892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731582846, "uuid": "903a6dab-a279-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.199.2:40565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583026, "uuid": "fb66a84a-a279-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.77.133:39100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583026, "uuid": "fb773c40-a279-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.121.142.188/pro2.jpg", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583104, "uuid": "2a228713-a27a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.58:57392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583149, "uuid": "447fab8f-a27a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.169.70:48558/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583167, "uuid": "4f539d0f-a27a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.11:50203/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583386, "uuid": "d22702e0-a27a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.66.21:33274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583685, "uuid": "847e1626-a27b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.108.231:42930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583770, "uuid": "b69a4071-a27b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.194:35129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583812, "uuid": "cfad6964-a27b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.43:55937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "157e50e0-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "15818412-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "1581864c-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "158401c2-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "158625bb-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "158a585a-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "158b12e3-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.142.71:59141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "1597e97f-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583929, "uuid": "15ee7666-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583930, "uuid": "162c5761-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583930, "uuid": "163341fb-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731583985, "uuid": "3720e426-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://bot.suqi.bf/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584047, "uuid": "5be86009-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.214.235:34447/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584107, "uuid": "7fb2386b-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.172.167:59596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584113, "uuid": "83120c82-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.3.139:50448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584226, "uuid": "c6b2a886-a27c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.75.89:56682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584525, "uuid": "78f1c516-a27d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.226.193:35311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584886, "uuid": "502b3ee1-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.3.139:50448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584946, "uuid": "739db27e-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.52.74:35256/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584946, "uuid": "739e916d-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.194:35129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584947, "uuid": "742615bb-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.139.120:43470/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584948, "uuid": "7542ca18-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.82.37:33885/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731584952, "uuid": "777801c9-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.111.117.251:48407/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585007, "uuid": "984a3aba-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.100.213.47:40994/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585008, "uuid": "98e75d9b-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.90.83:42662/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585009, "uuid": "998c0ec5-a27e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.93.32.243:47843/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585191, "uuid": "05c0e0de-a27f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.246.42:49511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585250, "uuid": "2950a3a3-a27f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.157.192:49140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585366, "uuid": "6e06075c-a27f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.111:47040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731585847, "uuid": "8ce8c10c-a280-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.165.8:37760/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586026, "uuid": "f773de0d-a280-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.66.21:33274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586027, "uuid": "f84ded99-a280-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.71.208.84:60369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a4b52a9-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/OTJNGv1Bp2t2WYGktp6VPWgKa80sFS8iAb", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a4ca751-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/k86m", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a4d1f70-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/lespim", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a4e6e5e-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/1ATrYF00OPos9ILX4GXP7CrCU1fYGAWRDz", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a4ec35e-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/ddgOXPItYnD4zmwu3lXpnQrEZtUIYtCthC", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a500311-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/H1RX3Qni5WrCB994mM4hal7TdGSjtnRdcZ", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a50e932-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/dgdrYULFpjPMXvNvgqVoO59ky4RSmvzQVg", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a519b6e-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/UvKqx1Yyb6q8FVVUDsFVAHpZADI3c3uEjF", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a5265f5-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/2D0yPSg4SFIcEYkXIFkGa1V1Xb9XJhHkIL", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a529b2b-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/DbOSmSy6TfY6CYwrdeYAdPiKSB116avlDd", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a56af62-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/1qjxPtKhJphpANiquw6g8atwK5WD8oUb2d", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a56ca2c-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/1kcOgxsnBLFS7xeornkhpCt5i59Q8yusQQ", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a5703b2-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/86AO51ixhIfQDzYERzZ86os2ArYLsdOgRE", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a572091-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/OjKGpLrGvbp2g2c4V1RmK4wATUFzcTl04v", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a592825-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/qkH15HPXBAUfrckz6oGyL4v3B4gbhhVPdx", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a59ed64-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/k68m", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586084, "uuid": "1a5b37ab-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/WXX9gCSV3pPRl49ZzyaHFJCEYRLa72x9BJ", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "1bab29f1-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/spim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "1bab5d7d-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/686i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "1c0badab-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/masjesuscan", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586087, "uuid": "1c1a2eae-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/686i", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586145, "uuid": "3e808ebb-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/lespim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586148, "uuid": "4091aed3-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.125.191/bins/spim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586331, "uuid": "ad25d791-a281-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.71:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586506, "uuid": "15ba2d2c-a282-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.53.39:43373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586751, "uuid": "a7d2b97e-a282-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.121.50:35492/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586808, "uuid": "c99d289d-a282-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.72.71.236:52968/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731586817, "uuid": "ced7adba-a282-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.134.196:37465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587074, "uuid": "6848c321-a283-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.83.178:58346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587347, "uuid": "0acecc9e-a284-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.55.179:47550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587528, "uuid": "76b2a057-a284-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.71.208.84:60369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587652, "uuid": "c0c05939-a284-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.54:39619/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587655, "uuid": "c27d75a6-a284-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.75.32:48329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731587662, "uuid": "c6e56a23-a284-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.138:39498/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588007, "uuid": "946b1e8d-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.244.203.24:34097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "db99020d-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "db9dcdef-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/h", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbbbe871-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbbe946c-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbbf028b-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/get.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbd1197c-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbd1df7b-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbe0b573-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dbe2abff-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/e", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588127, "uuid": "dc0ba366-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "dc6670b0-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/z.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "dc80cff4-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588128, "uuid": "dca67892-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588129, "uuid": "dd310719-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588129, "uuid": "dd310ca4-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yak.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588129, "uuid": "dd3c0542-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/r", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588129, "uuid": "dd50fb44-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/c1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588130, "uuid": "dda0f797-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/necr0.py", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588130, "uuid": "dda8a2d4-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/z", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588131, "uuid": "de3e91eb-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/d", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "de9d6ba0-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "deae90cd-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "deb9009f-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "db0fa4b8db0333367e9bda3ab68b8042", "colour": "#b5855d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dec7a19a-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "deca8068-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/b", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "ded8aced-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dede136a-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dee01608-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dee573e3-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/a.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dee6e541-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "dee991b5-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/t", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "deec8b05-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/76d32be0.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "deec9076-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "deef0362-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "def9045c-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "defce1d1-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "defed9d1-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "df0a77a5-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/splash.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "df0cfead-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "df0d7396-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/v", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "df1a5f99-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588132, "uuid": "df258b15-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/u", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "df2eaa90-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/c1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "df7be482-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/selfrep.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588133, "uuid": "dfb60bea-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fe81e632-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.arm5", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fe862fcb-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.ppc", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fe8639b6-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.sh4", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fe8be772-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.arm", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fe8df282-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fe94396e-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588185, "uuid": "fea55130-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588186, "uuid": "ff186652-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588186, "uuid": "ff1f2182-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "ffa85592-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.x86", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "ffb97e79-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.spc", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "ffb984dd-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588187, "uuid": "ffc7db2a-a285-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.arm7", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588188, "uuid": "003edc27-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588188, "uuid": "004b38e1-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588244, "uuid": "21db1866-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.arm6", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588244, "uuid": "21db1864-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.mpsl", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588245, "uuid": "21fb5b12-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.49.203:50819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588306, "uuid": "4688e6df-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.m68k", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588306, "uuid": "468cd393-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dlr.mips", "Tag": [ { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588426, "uuid": "8e41592e-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.203.217:48146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588551, "uuid": "d85a2bef-a286-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.25.188.133:58769/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731588967, "uuid": "d043a323-a287-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.11.138:58357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589145, "uuid": "3ae84222-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.246.42:49511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589210, "uuid": "61810df3-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.10.176/cARM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589211, "uuid": "61d24262-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-gpt.net/cARM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589211, "uuid": "61d48722-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://getgrass-earn.com/cARM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589268, "uuid": "83fccbba-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.116.51.186/bot", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589270, "uuid": "84e05139-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.59.134.66/cARM", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589270, "uuid": "84ee62ad-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.59.134.66/sshell.service", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589283, "uuid": "8cf62d69-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.225:52434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589402, "uuid": "d3ebf5e6-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.242.3:54170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589446, "uuid": "ee407612-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.211.165:52943/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589447, "uuid": "ee7ed22a-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.91.22:49907/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589447, "uuid": "eed21191-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.81.151.219:60664/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589449, "uuid": "efd3a44b-a288-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.72:58274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589566, "uuid": "35578486-a289-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/yakuza.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589625, "uuid": "58c632c5-a289-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dead/yakuza.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589685, "uuid": "7c925ce1-a289-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.19.14.250/dead/yakuza.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589745, "uuid": "a0596514-a289-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.49.203:50819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589866, "uuid": "e8569b0b-a289-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.225:52434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731589985, "uuid": "2f6a33ca-a28a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.203.217:48146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590226, "uuid": "befc0dc1-a28a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.7.19:56642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590289, "uuid": "e49eebbe-a28a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.146.20:60940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590351, "uuid": "0943d93e-a28b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.62.92:45386/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590408, "uuid": "2b5679b7-a28b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.1.170:44324/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590588, "uuid": "96c9c8d2-a28b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.175:49839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590645, "uuid": "b8eec7ff-a28b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.11.138:58357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590645, "uuid": "b8f6dab7-a28b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.32.206:57803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731590886, "uuid": "486c1952-a28c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.72:58274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591009, "uuid": "918ebc55-a28c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.10.176/sshell.service", "Tag": [ { "name": "open-dir", "colour": "#d9b789", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591010, "uuid": "920df73a-a28c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.39:56342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591069, "uuid": "b5aa13a8-a28c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.175.25.81:47405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591133, "uuid": "dbc2960d-a28c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://akrien.wtf/Akrien.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591134, "uuid": "dc16cadb-a28c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.242.3:54170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591246, "uuid": "1efb9f84-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.213:54465/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591253, "uuid": "22f882af-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.40.6:43661/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591259, "uuid": "26f448a5-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.115:41490/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591270, "uuid": "2d229339-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.216:45741/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591274, "uuid": "2fb75d7b-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.248.37.82:45876/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591308, "uuid": "4421ddb9-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.15:36511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591368, "uuid": "677b0691-a28d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.95.77:56312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591786, "uuid": "60fee719-a28e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.146.20:60940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591791, "uuid": "63cf7960-a28e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.224:58498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591845, "uuid": "844530cb-a28e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.62.92:45386/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731591966, "uuid": "cc30d574-a28e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.7.19:56642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592027, "uuid": "f09e5968-a28e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.usercontent.google.com/download?id=116iAB6nyzZJxxjH-dcNvsZy3LfWxsDAn&export=download", "Tag": [ { "name": "202413", "colour": "#e41793", "exportable": true, "hide_tag": false }, { "name": "pw-202413", "colour": "#f7902b", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592037, "uuid": "f645dda6-a28e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fuc%3fexport%3ddownload%26id%3d1Qehwy7iYzBZPlaLFb_6H10CTyxNqoxq0&umid=ab3ff601-35de-4838-99ff-ae76dd48dbbb&auth=927c0b1ab45858384aa0e7e4a36abbaf860b921f-63af8e92ed5a20811e6d37a2d0f1f66c3ec1aa1b", "Tag": [ { "name": "8860", "colour": "#8c2126", "exportable": true, "hide_tag": false }, { "name": "pw-8860", "colour": "#9c1e45", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592152, "uuid": "3ac9c222-a28f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.195.35:44025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592152, "uuid": "3b0c1263-a28f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.199.64:42886/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592208, "uuid": "5c55fc59-a28f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.175:49839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592208, "uuid": "5c672e1c-a28f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.32.206:57803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592265, "uuid": "7e77f526-a28f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.175.25.81:47405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592270, "uuid": "817c776d-a28f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.251.39:59474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592508, "uuid": "0ee6ae4e-a290-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.39:56342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592626, "uuid": "55c413ac-a290-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.170:36522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592685, "uuid": "78635ee7-a290-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.242.215.198:8000/CVE-2021-34527.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592749, "uuid": "9ea77446-a290-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.59.79:20191/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592865, "uuid": "e4202fde-a290-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.113.246:53024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731592926, "uuid": "080e4c16-a291-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.86.245:39951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593056, "uuid": "55f67b84-a291-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.188:33874/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593074, "uuid": "60cef135-a291-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.174.197:55106/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593112, "uuid": "774670ec-a291-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.108.84:36624/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593886, "uuid": "4456739a-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.195.35:44025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593946, "uuid": "683b54f5-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.235:41988/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593946, "uuid": "684d20db-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.248.79:34365/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593946, "uuid": "68590a76-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.47.188.252:37302/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731593954, "uuid": "6cf4614d-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.133.162:60184/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594185, "uuid": "f689e00b-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/b7.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594185, "uuid": "f68a4521-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/shellcode.txt", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594185, "uuid": "f68ae874-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/77.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594185, "uuid": "f68ae945-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/17.vba", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vba", "colour": "#d5ccfa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "f71e713d-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/t5.dll", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "f71e8d61-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/7code.bin", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "f722e72d-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/t4.dll", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594186, "uuid": "f737c311-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/90.exe", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594187, "uuid": "f7a3d1c7-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/tcp0.txt", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594187, "uuid": "f7de7af9-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.195.90.78:9090/b8.txt", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594187, "uuid": "f8168b4a-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.92.103.235:39404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594188, "uuid": "f8952530-a293-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://qdofg.strategies.mvpstrat.com/gotoCheckout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594307, "uuid": "3f69e9da-a294-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.212.11:35831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594494, "uuid": "aee1670d-a294-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.191.178.6:33625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594851, "uuid": "83bbff58-a295-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.66.125:47105/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594867, "uuid": "8d5557fd-a295-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.137.199:50607/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731594966, "uuid": "c850cafc-a295-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.125.149:53206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595027, "uuid": "ecd0083a-a295-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.25.192:36932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595088, "uuid": "10e07164-a296-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.180.175:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595326, "uuid": "9ec9fcbf-a296-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.176:801/client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595326, "uuid": "9ecaa1ab-a296-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.176:801/msf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595386, "uuid": "c2590ce8-a296-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.176:801/msf443.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595454, "uuid": "eb09a50d-a296-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.197.119:37471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595573, "uuid": "31ca368a-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.26:53345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595630, "uuid": "5414b204-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.176:801/wwbizsrvs.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595653, "uuid": "617aec58-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.221:59206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595746, "uuid": "98fc80b0-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.169:801/msf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595746, "uuid": "990778d1-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.169:801/client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595746, "uuid": "9912d18e-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.169:801/msf443.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595750, "uuid": "9b761b7f-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.169:801/wwbizsrvs.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595750, "uuid": "9bb33dcf-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.160:801/msf443.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595750, "uuid": "9bbf87cb-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.160:801/client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595752, "uuid": "9c76b4be-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.160:801/msf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595754, "uuid": "9de1f29c-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.102.130.160:801/wwbizsrvs.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731595763, "uuid": "a302e721-a297-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.66.250:50593/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596003, "uuid": "32a08fe3-a298-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.133.34:55542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596047, "uuid": "4c8f49b2-a298-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.191.178.6:33625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596109, "uuid": "71a79f42-a298-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.212.11:35831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596313, "uuid": "eb44d2fb-a298-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.93.132.76:43043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596657, "uuid": "b7f07ec0-a299-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.154.0:37803/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731596765, "uuid": "f8a45901-a299-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.197.119:37471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597014, "uuid": "8cc3f061-a29a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.209.200:52327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597126, "uuid": "cfc8fcd0-a29a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.221:59206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597186, "uuid": "f3346a8e-a29a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.155:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597309, "uuid": "3cf4b048-a29b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.9.26:53345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597486, "uuid": "a674b692-a29b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.129.189:46087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597545, "uuid": "c9b9603d-a29b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.138.176.101:60773/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597546, "uuid": "ca0a7e68-a29b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.77.240:54462/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597791, "uuid": "5c05c662-a29c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.93.132.76:43043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731597912, "uuid": "a3f4bc98-a29c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.198.38:58224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598153, "uuid": "33bf1ef0-a29d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.192:43878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598213, "uuid": "575a0585-a29d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.116.183:58245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598269, "uuid": "790b183d-a29d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.116.53:55990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598269, "uuid": "792a37e8-a29d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.53.250:47218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598446, "uuid": "e2a15cf2-a29d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.73.74:59581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598447, "uuid": "e34c9e33-a29d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.194.104:38589/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598686, "uuid": "71d225f7-a29e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.129.189:46087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598689, "uuid": "73438f3d-a29e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.126.75.30:41669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731598810, "uuid": "bb7b57d6-a29e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.106:57131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599045, "uuid": "47c4147e-a29f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.27.197:55750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599170, "uuid": "9207850a-a29f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.7.37:60854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599225, "uuid": "b2bc2ee0-a29f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.36.241:52285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599231, "uuid": "b636ec7d-a29f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.179.225:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599351, "uuid": "fdde1088-a29f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.43.115:46945/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599370, "uuid": "0930160b-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.181:56474/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599527, "uuid": "66b22dda-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.7.37:60854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599527, "uuid": "66d26afc-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.167.176:51404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599531, "uuid": "69607db0-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.255.33:41547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599768, "uuid": "f67f542d-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.197.210:40850/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599827, "uuid": "19a64fc4-a2a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.28.147:46970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731599887, "uuid": "3d58feec-a2a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.226:56357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600008, "uuid": "85bb744f-a2a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.73.74:59581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600009, "uuid": "85e70a63-a2a1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.116.53:55990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600250, "uuid": "15885510-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.94.189:58346/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600252, "uuid": "16d6c2b3-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.102.164:52009/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600252, "uuid": "16e58ded-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.66.164:42657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600270, "uuid": "21676215-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.153:36990/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600308, "uuid": "385ae225-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.122.71:35294/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600365, "uuid": "5a863c8d-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.252.3:35035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600444, "uuid": "8987380c-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.185:36041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600491, "uuid": "a5ac9785-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.20.167:50192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600609, "uuid": "eba3828e-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.92.79:38637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600726, "uuid": "313463cf-a2a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.36.241:52285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731600785, "uuid": "54eb3379-a2a3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.255.33:41547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601146, "uuid": "2bc33f6f-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.66.164:42657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601147, "uuid": "2c85afd6-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.96.89:56533/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601155, "uuid": "3172a9f7-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.226:56357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601166, "uuid": "37f07a62-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.107.176:47837/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601209, "uuid": "512d66c3-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.17.51:45508/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601329, "uuid": "9920aa0a-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.240.18:49338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601584, "uuid": "30e13074-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.194.168:58196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601812, "uuid": "b8e8b59b-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.254.220:49288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601814, "uuid": "b9cb5399-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.159.53:47491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731601955, "uuid": "0e0e67ff-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.185:36041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602048, "uuid": "4597e88e-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.194.247:40255/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602051, "uuid": "477fd489-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.63.206:51868/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602114, "uuid": "6cd4baae-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.10.137:34638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602376, "uuid": "0932b86b-a2a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.108:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602377, "uuid": "09800d3b-a2a7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.22.141:38510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731602968, "uuid": "69d047cf-a2a8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.103.168:52506/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603246, "uuid": "0f8a88e1-a2a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.159.53:47491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603545, "uuid": "c1dd5333-a2a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.234.66:40618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603609, "uuid": "e7d35409-a2a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.49:56552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603616, "uuid": "ebfe4a0f-a2a9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.188.251.58:43783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603728, "uuid": "2ef89ea7-a2aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.60.0:46166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603846, "uuid": "74e7e140-a2aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.55:49793/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731603846, "uuid": "74f8bf9e-a2aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.118.69:40600/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604026, "uuid": "e07110bc-a2aa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.150.232.218:36412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604104, "uuid": "0efe7993-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.82.183:48218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604146, "uuid": "28023606-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.22.141:38510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604343, "uuid": "9d47bbf7-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.112:37252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604445, "uuid": "da49d7cd-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.188.251.58:43783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604448, "uuid": "dc0419eb-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.0:33270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604569, "uuid": "24418ff4-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.164.112:50933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604627, "uuid": "467bd778-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.150.232.218:36412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604686, "uuid": "698f9ab7-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.167.85:39717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604747, "uuid": "8e42f1fc-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.85.137:60519/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731604928, "uuid": "fa35af8a-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.44.144.198:4403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605107, "uuid": "64e56103-a2ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.49:56552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605171, "uuid": "8b13e6d0-a2ad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.7.58.78:58096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605531, "uuid": "61724cb7-a2ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.47.152:34836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605766, "uuid": "ed5ba47b-a2ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.40.187:53773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605766, "uuid": "ed665ba8-a2ae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.226:59332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605826, "uuid": "11438582-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.7.58.78:58096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605847, "uuid": "1e1786d2-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.20.188:37009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731605945, "uuid": "5878ea58-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.92:40680/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606015, "uuid": "81e1a909-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.167.85:39717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606065, "uuid": "9ff88226-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.0:33270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606070, "uuid": "a2f93773-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.181.158:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606088, "uuid": "ad45355c-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.243.69:45358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606185, "uuid": "e7482256-a2af-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.79.41:47752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606246, "uuid": "0b66b45c-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.110:55807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606317, "uuid": "35de5d42-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.241.167:46166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606546, "uuid": "be548528-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.237.99:39036/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606550, "uuid": "c09af2d4-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.227.185.10:59041/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606608, "uuid": "e39f0f1f-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.162.100:53856/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606609, "uuid": "e3c5bb82-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.149.85:40898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606611, "uuid": "e52a4d1c-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.225.70:50168/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731606786, "uuid": "4d7301aa-a2b1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.47.152:34836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607086, "uuid": "00754a89-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.40.187:53773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607146, "uuid": "2445295c-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.20.188:37009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607266, "uuid": "6bc227b6-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.149.85:40898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607446, "uuid": "d7127c8d-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.27.197:55750/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607447, "uuid": "d75e37b4-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.226:59332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607452, "uuid": "da8c0de8-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.23.158:44502/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607507, "uuid": "fb1097a2-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.11.253:39278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607566, "uuid": "1e9c78d4-a2b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.241.167:46166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607688, "uuid": "6700200a-a2b3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.73:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731607985, "uuid": "184d888f-a2b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.254.220:49288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608166, "uuid": "8419f492-a2b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.53.250:47218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608286, "uuid": "cb67699b-a2b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.219.13:42739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608286, "uuid": "cb6773f9-a2b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.105.221:47310/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608371, "uuid": "fe39a52f-a2b4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.142.237:50487/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608411, "uuid": "15d5320b-a2b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.159.154.179:37602/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608586, "uuid": "7e45d36c-a2b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.110:55807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608646, "uuid": "a22a4a7e-a2b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.143.178:49317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608771, "uuid": "ec88dfe6-a2b5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.28.61:54934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608848, "uuid": "1a6f7067-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.212:57598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608948, "uuid": "5654a9e6-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.45:58559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731608950, "uuid": "573c5031-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.193.27:51995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609070, "uuid": "9f1cd02e-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.11.253:39278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609129, "uuid": "c24c7934-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.193.27:51995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609248, "uuid": "091fc7f5-a2b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:60665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609249, "uuid": "096ccb1e-a2b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.209.56:32939/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609249, "uuid": "09c7489c-a2b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.125.28:45283/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609607, "uuid": "deab7925-a2b7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.43.80:38177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609794, "uuid": "4e8788f5-a2b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.94.224:37800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609845, "uuid": "6cddf081-a2b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.246.164:34041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731609845, "uuid": "6cfb66a7-a2b8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.105.221:47310/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610147, "uuid": "2098fcfa-a2b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.216.97.152:36300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610325, "uuid": "8b31fb5c-a2b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.45:58559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610464, "uuid": "ddc40e2c-a2b9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.155.45:58439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610625, "uuid": "3da3e85a-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.203.78:46498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610685, "uuid": "618d53b8-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.219.13:42739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610685, "uuid": "619133a3-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.43.80:38177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610708, "uuid": "6f47e6a1-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.220.212:41682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610751, "uuid": "88dad0cb-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.129.107:33048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731610810, "uuid": "abb50331-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.149.238:34069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611045, "uuid": "3842b98f-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.104.101:35726/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611046, "uuid": "386e89be-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.143.178:49317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611056, "uuid": "3e8681ca-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.162.149:33111/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611346, "uuid": "eb6a1cd5-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.216.97.152:36300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611466, "uuid": "32d8f410-a2bc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.246.164:34041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611886, "uuid": "2d8adad8-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.199:48159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611946, "uuid": "5111f563-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.100.202:53858/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611947, "uuid": "517cff5c-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.90.11:50646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611952, "uuid": "5488bdcc-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.226.223:58031/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731611968, "uuid": "5e71ed30-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.103:47669/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612008, "uuid": "761a84a6-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.129.107:33048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612015, "uuid": "7a7a057c-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.155.45:58439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612033, "uuid": "84c0d8b8-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.46.75:47955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612246, "uuid": "03f76afb-a2be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.244.25:39566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612611, "uuid": "ddc17fc8-a2be-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.120.85:49335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612780, "uuid": "4210e227-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.242.205:38542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612847, "uuid": "6a6dd65e-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.108.62:51564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612848, "uuid": "6a8137d2-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.49.221:44282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612848, "uuid": "6abf3e10-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.7.14.39:44991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731612966, "uuid": "b121a7a0-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.120.85:49335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613090, "uuid": "faf77074-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.109.170:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613325, "uuid": "86d0c5fc-a2c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.90.11:50646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613327, "uuid": "882fc290-a2c0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.52:45798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613574, "uuid": "1b8d2d7e-a2c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.242.205:38542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613746, "uuid": "81ea3b87-a2c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.122.185:44889/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613807, "uuid": "a6872e15-a2c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.39:43448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731613808, "uuid": "a70200b6-a2c1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.3.112:52581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614047, "uuid": "354fe7b5-a2c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.139.232:35897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614113, "uuid": "5cae713d-a2c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.229.221:52667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614166, "uuid": "7c859e5a-a2c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.194.247:40255/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614291, "uuid": "c71a41ca-a2c2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.104:48721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614409, "uuid": "0d620629-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.39:43448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614611, "uuid": "85b92a3b-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.86.179:57159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614651, "uuid": "9dada348-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.149.153.166:41997/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614681, "uuid": "af782813-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.22:39028/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731614914, "uuid": "39f335e1-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.167.62:35774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615010, "uuid": "736cc8c4-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.211.233:32835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615206, "uuid": "e814eaee-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.6.21:51398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615546, "uuid": "b2a590c5-a2c5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.49:56552/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615846, "uuid": "659f71c5-a2c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.92.32:46284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731615908, "uuid": "8ae5e736-a2c6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.149:59977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616147, "uuid": "1962b2ae-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.95.219:44647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616209, "uuid": "3df6ce62-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.167.176:51404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616270, "uuid": "62537eb4-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.86.179:57159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616273, "uuid": "647b2ebd-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.76.54:40144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616406, "uuid": "b345ca4b-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.48.254:41809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616449, "uuid": "cd01f840-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.86.179:57159/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616453, "uuid": "cfc4d393-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.2.178:39361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616457, "uuid": "d1a1ff5f-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.82.10:42659/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616457, "uuid": "d226090b-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.201.137.223:33828/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616469, "uuid": "d8f5f4e9-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.166:56182/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616571, "uuid": "15ec8850-a2c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.98:43737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616807, "uuid": "a271ffc5-a2c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.194.247:40255/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616881, "uuid": "ce8b5870-a2c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.6.21:51398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731616929, "uuid": "eb29db4f-a2c8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.15.25.205:55366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617168, "uuid": "798d76e0-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.135:57808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617286, "uuid": "c008e8a2-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.211.233:32835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617349, "uuid": "e57c40aa-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.119.193.238:33245/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617363, "uuid": "ee134d8d-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.237:60633/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617585, "uuid": "723fd65d-a2ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.98:43737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617707, "uuid": "baaa44b0-a2ca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.149:59977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617826, "uuid": "01b20db6-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.95.219:44647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617888, "uuid": "26baf8c4-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://ngt-techs.com/work/das.php", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617946, "uuid": "4971524b-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.216.13:43935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617947, "uuid": "49aff241-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.34.167:35783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731617947, "uuid": "49b4a709-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:55147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618009, "uuid": "6ec942c6-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.54.78:41003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618037, "uuid": "7f692108-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.48.254:41809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618069, "uuid": "92f6e9ce-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.6.95:39032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618129, "uuid": "b68e9c35-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.57.234:53115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618145, "uuid": "c009dbd9-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.118.69:58895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618248, "uuid": "fd5d13f9-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.103.211:34774/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618248, "uuid": "fd7c16c4-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.230.109.4:48208/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618428, "uuid": "688577e0-a2cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.51:58510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618485, "uuid": "8aec17d9-a2cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.236.100:53092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618546, "uuid": "aefc9b40-a2cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.90.125:40567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618613, "uuid": "d6f788bc-a2cc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.127.204:40277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618791, "uuid": "412e595c-a2cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.237.0:59963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731618913, "uuid": "8a0ac0a9-a2cd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.154.178:48826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619147, "uuid": "1574b328-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/oeejpmo.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "16762fdb-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/heIkmof.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "16a66646-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/Skkmrjk.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "16a955ee-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/jgmdraa.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "16aaee5f-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/oagnkAm.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619149, "uuid": "16b1fe45-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/epSgFAk.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619150, "uuid": "16c4e3a9-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://bitbucket.org/fqwfqwght/qwrqwrhnb/downloads/nfpffrc.txt", "Tag": [ { "name": "base64", "colour": "#291762", "exportable": true, "hide_tag": false }, { "name": "bitbucket", "colour": "#435d86", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619159, "uuid": "1c814a0f-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.7.5:34730/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619165, "uuid": "2019c010-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.153.209:56516/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619208, "uuid": "395fbe4c-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.216.13:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619208, "uuid": "39ad8fbc-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.201.13:58754/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619265, "uuid": "5bb1b695-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.34.167:35783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619326, "uuid": "80038b5d-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.6.95:39032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619445, "uuid": "c72570df-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://xke.range.cccinvolve.org/orderReview", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619566, "uuid": "0ef343a6-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.97.72:52463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619625, "uuid": "32105a10-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.51:58510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619629, "uuid": "34a91c0e-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.4.194:55554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "58fb3c39-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/bot.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "5916b917-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "5916c1e7-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "591df1b1-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "5922cf5b-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "5924e27c-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "59268550-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "592955a7-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619690, "uuid": "592b8909-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "593b9b04-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "5947fdc0-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "59549cc7-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "5957ba94-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "5957bce2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "596e6364-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "5977dc7c-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "597e4e04-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "59a91bf6-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619691, "uuid": "59a99c7c-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59cbb618-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59d3330a-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59d62969-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59dbfa38-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59dd1be1-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59dd7d05-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59de3110-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59e1e84d-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59e36e95-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59e44d69-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59e8a823-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59e9a429-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59f18a35-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "59fe40f3-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "5a172a30-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "5a550ff4-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "5a608c03-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619692, "uuid": "5a60aebc-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619693, "uuid": "5a65b6b8-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619693, "uuid": "5a86327d-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619693, "uuid": "5ac5f551-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b329447-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b35c2d2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b528ba5-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b528fd2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/bot.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b56aeb1-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b5b0230-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/selfrep.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b5d85a2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b758899-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619694, "uuid": "5b78c8d6-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619695, "uuid": "5b9a1b53-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619747, "uuid": "7a9f52b2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/necr0.py", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7be6b276-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/d", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bece767-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/z.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bf040a5-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bf47a10-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/u", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bf91b79-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bff1b9a-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/z", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bff239e-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/c1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bff25d5-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/c1", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bff2945-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/h", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7bff2f88-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yak.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c028ec1-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/e", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c03cf46-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.12:43048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c054404-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/wget.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c07f674-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dead/yakuza.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c080c2d-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/bins.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c0b03be-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/get.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c0bc772-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/76d32be0.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c0be6f2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c0bea36-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/b", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c0d768a-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/a.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c0fc3df-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/r", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c1000a2-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/dlr.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c1000f1-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/c.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c12fa56-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/v", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c131cfa-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/t", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619749, "uuid": "7c18ec0d-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/splash.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619811, "uuid": "a0f90159-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619813, "uuid": "a213bed8-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.237.0:59963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619814, "uuid": "a28b56c0-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619814, "uuid": "a28b6c61-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com/yakuza.sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619871, "uuid": "c4a8d1bf-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.158.132:42932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731619927, "uuid": "e64531bf-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.197.210:40850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620046, "uuid": "2d07f36c-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.127.204:40277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620052, "uuid": "30bc27f1-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.134.181:59471/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620068, "uuid": "3a512c83-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.216:36573/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620108, "uuid": "52395f84-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.76.54:40144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620108, "uuid": "524160a8-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.57.234:53115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620294, "uuid": "c0e6972c-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.85.214:55987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620346, "uuid": "e00e8b37-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.40.246:47067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620526, "uuid": "4b45faa4-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.158:54074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620644, "uuid": "916d0653-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/hik.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "932db5a7-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "93323ef6-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "93365cab-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "93366f30-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "93377eb8-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "933dd056-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "933ead59-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "933edf19-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "93436e50-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "9346c0b1-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "9348f81a-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "934913b8-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "934d2cc0-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "934d3a80-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "934f1c4a-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.154.178:48826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "9360fe7a-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620647, "uuid": "9363873d-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/bins/byte.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620706, "uuid": "b643915a-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://byte-main-cnc.n-e.kr/hik.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620707, "uuid": "b6cf1ff6-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620707, "uuid": "b6d47da8-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620707, "uuid": "b6d4a4d6-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620707, "uuid": "b718fcd7-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620726, "uuid": "c23f2fb3-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.186.44:57753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620765, "uuid": "d9c8809c-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620824, "uuid": "fcff41dc-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.18.27/dlr/dlr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620826, "uuid": "fdf3320e-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.4.194:55554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620895, "uuid": "2720da25-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.document-sharing.com/Downloads/cdn3/Agreement%20for%20YouTube%20cooperation.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620949, "uuid": "4754efa6-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.131:58461/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620949, "uuid": "4788887c-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.76.194:49629/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731620957, "uuid": "4c307d12-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.251.240:42708/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621017, "uuid": "6fb2f45b-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-defac18.studyzone-investmentguru.com/api/uz/0912545164/Wharf", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621126, "uuid": "b1115fab-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.15.202:50584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621246, "uuid": "f81b4478-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.97.72:52463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621246, "uuid": "f898b6ba-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.8.28.24:40330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621307, "uuid": "1cac1f18-a2d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.239.120:38796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621489, "uuid": "88f18982-a2d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.204.89:35299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621546, "uuid": "aaf2bdb2-a2d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.158.132:42932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621667, "uuid": "f313b536-a2d3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.4.120:52396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621727, "uuid": "1715ee3d-a2d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.114.206:58502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621846, "uuid": "5db34332-a2d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.237.99:39036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621847, "uuid": "5e5154d0-a2d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.148.106:42883/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731621967, "uuid": "a5db6622-a2d4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.85.214:55987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622208, "uuid": "358a1a78-a2d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://mubjahuke.b-cdn.net/bitur/kambik.txt", "Tag": [ { "name": "b-cdn", "colour": "#68F447", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622265, "uuid": "57a6e660-a2d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.120:41952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622266, "uuid": "58282108-a2d5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.209.158:54074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622686, "uuid": "52ae8b67-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.53:46470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622746, "uuid": "769c4bcd-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.4.224.19:49807/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622747, "uuid": "771a961a-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.121.170:56138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622750, "uuid": "78fb83f6-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.43:41669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622774, "uuid": "86fa9ba2-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.122.91:44867/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622808, "uuid": "9b1074f3-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.191:45477/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622809, "uuid": "9bbdaa38-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.248.130:60319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622986, "uuid": "0569e69d-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.121.170:56138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731622986, "uuid": "0582f19e-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.119.132:33193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623046, "uuid": "2950875f-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.40.246:47067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623166, "uuid": "70cabe8c-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.12:43048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623232, "uuid": "98414f6a-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.201.53:60109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623288, "uuid": "b990c425-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.118.225:54885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623305, "uuid": "c3cda76b-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.237.154:49788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623346, "uuid": "dc2aab0d-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.237.99:39036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623528, "uuid": "4851be4b-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.224.28.103:51801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623588, "uuid": "6c3dbeeb-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.88.51:41682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623646, "uuid": "8ec46e89-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.248.130:60319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623646, "uuid": "8f18b4aa-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.131:45114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623724, "uuid": "bd39fecb-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.119.132:33193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623839, "uuid": "01dc5b52-a2d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.25:32783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623886, "uuid": "1de19bf4-a2d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.118.14:47311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731623946, "uuid": "41e0513e-a2d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.82:42584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624185, "uuid": "d05a7555-a2d9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.43:41669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624308, "uuid": "192240dd-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.88.114:56248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624367, "uuid": "3c83da53-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.236.100:53092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624368, "uuid": "3d3207fd-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.102.168:59640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624546, "uuid": "a720089a-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.118.225:54885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624548, "uuid": "a85abed1-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.154.0:42541/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624552, "uuid": "aabd5ccc-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.45.86:56936/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624665, "uuid": "ee266091-a2da-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.131:45114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731624846, "uuid": "59d71ad9-a2db-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.233:60699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625208, "uuid": "31abb934-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.2.88.114:56248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625268, "uuid": "557fb6e1-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.88.51:41682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625268, "uuid": "55ad207a-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.75.180.125:6003/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625270, "uuid": "56e9a3fc-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.75.180.125:6004/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625391, "uuid": "9eac742f-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.88.81:41412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625444, "uuid": "be8a5da1-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.84.7:88/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625446, "uuid": "bfada7e7-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.229.221:52667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625571, "uuid": "0a612b94-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.36:59373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625626, "uuid": "2ad4ee25-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.118.14:47311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625631, "uuid": "2e2bd8db-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.183.129:55082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625870, "uuid": "bc56aaed-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.250.127.120:36492/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625986, "uuid": "01b2c52a-a2de-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.110:54169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731625990, "uuid": "0432d70a-a2de-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.24.171:36307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626347, "uuid": "d89db813-a2de-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.26.81.234:45223/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626712, "uuid": "b2998014-a2df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.224.230:49497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626731, "uuid": "bd92b777-a2df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.35:45705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626765, "uuid": "d1d701e1-a2df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.176.63:54328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626771, "uuid": "d5359b7a-a2df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.81.107:35128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626826, "uuid": "f66120b5-a2df-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.233:60699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626946, "uuid": "3d84b5f7-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.176.63:54328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731626946, "uuid": "3df150fd-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.88.81:41412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627009, "uuid": "63a1293d-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.24.171:36307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627071, "uuid": "8805e79b-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.8.35:45705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627086, "uuid": "910dc7ea-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.95.118:37516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627128, "uuid": "aa1928fa-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.207.138:33785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627128, "uuid": "aa3a29d1-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.251:37364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627186, "uuid": "ccfeaf2c-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.214.246:37248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627187, "uuid": "cd2ec510-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.185.20:35256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627188, "uuid": "cdc6e32b-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.218.36:59373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627203, "uuid": "d6ddde29-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.202:38340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627387, "uuid": "44935103-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.31:50364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627486, "uuid": "7f64efd2-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.202.217:53584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627486, "uuid": "7f979f4c-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.174.29:36075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627607, "uuid": "c7c16e04-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.100.84:45925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731627667, "uuid": "eb48ebda-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.110:54169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731628265, "uuid": "4fff3874-a2e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.224.230:49497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731628265, "uuid": "50075afa-a2e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.214.246:37248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731628385, "uuid": "97b4328b-a2e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.81.107:35128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731628514, "uuid": "e46b467c-a2e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.29.16:45604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1731628534, "uuid": "f09900af-a2e3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.207.138:33785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625265, "uuid": "53d3f1a8-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.75.180.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566884, "uuid": "65decb4e-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.168.32.140", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571023, "uuid": "092f0342-a25e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.243.37.3", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590283, "uuid": "e1110df1-a28a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.146.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551344, "uuid": "37c7404c-a230-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.215.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731592744, "uuid": "9bbb5378-a290-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.59.79", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584944, "uuid": "725c952f-a27e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.111.117.251", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601144, "uuid": "2ac3ed32-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.229.107.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556684, "uuid": "a62626cf-a23c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.247.66.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547444, "uuid": "22f65b98-a227-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.113.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583744, "uuid": "a74d72f1-a27b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.185.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595983, "uuid": "26739804-a298-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.253.133.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588424, "uuid": "8ca8045b-a286-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.203.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577744, "uuid": "af35471b-a26d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.47.68", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552244, "uuid": "4fb3786a-a232-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.150.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619868, "uuid": "c306ec98-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.158.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615006, "uuid": "70e15766-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.211.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618784, "uuid": "3d08498b-a2cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.237.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622744, "uuid": "753e9c15-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.121.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551410, "uuid": "5f185fed-a230-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.159.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611043, "uuid": "37178f31-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.104.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577084, "uuid": "25cf366d-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.125.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554524, "uuid": "9f01d51a-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.13.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559744, "uuid": "c63a54e7-a243-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.230.114", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578105, "uuid": "86070bff-a26e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.55.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572705, "uuid": "f376370e-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.27.36.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551044, "uuid": "84e271ed-a22f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.27.37.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605164, "uuid": "86ded126-a2ad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.7.58.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582424, "uuid": "94aecef6-a278-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.98.201.248", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582065, "uuid": "be841ddf-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.29.237.232", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614646, "uuid": "9a36d7f3-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.149.153.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616446, "uuid": "cb231dcc-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.201.137.223", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554344, "uuid": "33a5e53b-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.210.224.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574564, "uuid": "47afc196-a266-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.163.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624843, "uuid": "58762aaf-a2db-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.4.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552064, "uuid": "e46d11be-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.65.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547683, "uuid": "b1a5386e-a227-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.155.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623223, "uuid": "92f38455-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.201.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543305, "uuid": "800b8069-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.215.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549005, "uuid": "c5a10ac1-a22a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.219.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609245, "uuid": "077239e8-a2b7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.125.28", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606606, "uuid": "e239073b-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.149.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627125, "uuid": "a89f668e-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.197.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731558244, "uuid": "487e696f-a240-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.49.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543305, "uuid": "800baba3-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.56.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618124, "uuid": "b3a260e9-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.57.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586744, "uuid": "a395e599-a282-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.121.50", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555246, "uuid": "4d595d72-a239-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.177.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577744, "uuid": "af359f2a-a26d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.178.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731591784, "uuid": "5f7b364f-a28e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.99.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590224, "uuid": "bd8319f0-a28a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.7.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545284, "uuid": "1b9c2253-a222-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.180.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552724, "uuid": "6ddbc198-a233-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.251.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559983, "uuid": "54dcdb23-a244-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.100.174.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731578645, "uuid": "c7e1b3ed-a26f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.158.127", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543006, "uuid": "cdef19a2-a21c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.6.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623884, "uuid": "1caa7e44-a2d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.118.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582244, "uuid": "29336160-a278-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.168.128", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554584, "uuid": "c293eeb4-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.94.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550023, "uuid": "2467094f-a22d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.142.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548045, "uuid": "88f98d1c-a228-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.161.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577024, "uuid": "020e858a-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.171.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623644, "uuid": "8d62c3a0-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.10.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567843, "uuid": "a1ee0edc-a256-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.250.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731628504, "uuid": "de77fd75-a2e3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.29.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589444, "uuid": "ecfc6e60-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.91.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624544, "uuid": "a61de594-a2da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.154.0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544326, "uuid": "e071cb43-a21f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.37.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620283, "uuid": "ba6ce989-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.85.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574865, "uuid": "fb13a32a-a266-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.88.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731593944, "uuid": "66fd42c4-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.133.162", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620044, "uuid": "2c00eb3c-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.134.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577565, "uuid": "4457767f-a26d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.139.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731558424, "uuid": "b39bb3b8-a240-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.122.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623284, "uuid": "b6dbceba-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.237.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608344, "uuid": "edda3ee1-a2b4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.142.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543124, "uuid": "13ed6c21-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.27.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569706, "uuid": "f7eab16f-a25a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.30.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605824, "uuid": "0fe25f3b-a2af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.20.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574684, "uuid": "8f4fd653-a266-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.27.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570424, "uuid": "a438cd96-a25c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.215.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577144, "uuid": "4995d3df-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.216.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549843, "uuid": "b91df16b-a22c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.216.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543845, "uuid": "c174748b-a21e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.222.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606063, "uuid": "9ed45c16-a2af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.243.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577744, "uuid": "af351bd6-a26d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.10.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618124, "uuid": "b3a2725c-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.118.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583144, "uuid": "41812012-a27a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.12.11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556984, "uuid": "5940cc61-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.126.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563344, "uuid": "2849339a-a24c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.13.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557824, "uuid": "4db89a26-a23f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563943, "uuid": "8d2a545e-a24d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542524, "uuid": "ae6b0d71-a21b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608824, "uuid": "0c073791-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600424, "uuid": "7d6cda82-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.21.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550624, "uuid": "8a345f98-a22e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.215.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563106, "uuid": "9a4eae3c-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.25.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614646, "uuid": "9a36d85f-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.26.22", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627184, "uuid": "cbe8ee26-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.28.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616446, "uuid": "cb215610-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.29.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546784, "uuid": "99484f06-a225-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.31.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577744, "uuid": "af3554f6-a26d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.44.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581344, "uuid": "10d44cc1-a276-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.46.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571444, "uuid": "03be52f1-a25f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.35", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615183, "uuid": "dac9bb6d-a2c4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.6.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611944, "uuid": "4fff7943-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.103", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600244, "uuid": "12419e26-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.153", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546964, "uuid": "050d27c8-a226-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566107, "uuid": "96b276ab-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.73", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620044, "uuid": "2c00e0e5-a2d0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580384, "uuid": "d4af1696-a273-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587643, "uuid": "bb7ea686-a284-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.138", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623824, "uuid": "f8c70c57-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559924, "uuid": "319bfc61-a244-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731593044, "uuid": "4ea2f556-a291-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.9.188", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579544, "uuid": "dfc35a52-a271-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.9.8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731591243, "uuid": "1d5f9f46-a28d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583084, "uuid": "1de9c29c-a27a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556684, "uuid": "a6263ab0-a23c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617344, "uuid": "e28ee21f-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627364, "uuid": "36d1ba16-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577031, "uuid": "05ebe879-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.179", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599343, "uuid": "f94319cb-a29f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562806, "uuid": "e794a4b6-a24a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547743, "uuid": "d52e4e55-a227-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.182.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572584, "uuid": "ab62df70-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.187.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546007, "uuid": "ca6f5dfb-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.225.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570543, "uuid": "eb2310aa-a25c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.131.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620705, "uuid": "b60193b1-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.186.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562806, "uuid": "e794c0ae-a24a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.240.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612725, "uuid": "213e1757-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.242.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577024, "uuid": "01ff9089-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.246.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731604083, "uuid": "02806dfc-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.82.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614584, "uuid": "753a2303-a2c3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.86.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577025, "uuid": "02877cc0-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.220.16", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610683, "uuid": "607df221-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.220.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594845, "uuid": "7fd4e53b-a295-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.137.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555246, "uuid": "4d5995ae-a239-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.34.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612006, "uuid": "74d905be-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.46.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544443, "uuid": "265cf848-a220-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.51.10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731612608, "uuid": "dbd9aacf-a2be-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.120.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547147, "uuid": "71a22411-a226-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.32.214", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552844, "uuid": "b590d4ac-a233-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.32.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731591243, "uuid": "1d5fae1c-a28d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.40.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587044, "uuid": "561886b9-a283-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.83.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600244, "uuid": "1241b4e3-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.94.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565868, "uuid": "088043db-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.76.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620944, "uuid": "448aea8c-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.76.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565505, "uuid": "3042ddab-a251-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.200.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577031, "uuid": "05ee76d3-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.112.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553984, "uuid": "5d02e08f-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.112.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601564, "uuid": "24e664a0-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.194.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731604324, "uuid": "921269e1-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.1.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549543, "uuid": "062f0f7d-a22c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.10.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589266, "uuid": "8279aea3-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.5.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731591243, "uuid": "1d5fa84e-a28d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731626705, "uuid": "ae0c21da-a2df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.8.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556264, "uuid": "abc8d1a4-a23b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.8.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602944, "uuid": "5b8b4a17-a2a8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.103.168", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622744, "uuid": "753e83e1-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.122.91", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557044, "uuid": "7d168e88-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.154.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610444, "uuid": "d1ee142a-a2b9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.155.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616385, "uuid": "a6bd6783-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.48.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563943, "uuid": "8d2a4af4-a24d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.50.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620944, "uuid": "448b247e-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.251.240", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589384, "uuid": "c9083821-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.242.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562806, "uuid": "e794df90-a24a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.14.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562447, "uuid": "1166a5fa-a24a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.23.119", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572284, "uuid": "f8a33d27-a260-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.36.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624544, "uuid": "a61df661-a2da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.45.86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546484, "uuid": "e6c4f69f-a224-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.167.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543845, "uuid": "c1749016-a21e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.173.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552605, "uuid": "274abca7-a233-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.0.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562865, "uuid": "0a5d6d27-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.102.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618245, "uuid": "fb66f8e2-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.103.211", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554705, "uuid": "0af35bd7-a238-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.13.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573245, "uuid": "35497805-a263-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.146.64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575043, "uuid": "6541470b-a267-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.164.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551647, "uuid": "ec09ddee-a230-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.173.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562271, "uuid": "a8939d87-a249-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.205.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546007, "uuid": "ca71d2f0-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.3.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547926, "uuid": "42301d2f-a228-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.50.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602046, "uuid": "443f1013-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.63.206", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571444, "uuid": "03be4471-a25f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.10.223", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565145, "uuid": "594db680-a250-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601144, "uuid": "2ac3f524-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.96.89", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550985, "uuid": "6142d252-a22f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619143, "uuid": "130381cb-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.153.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731560224, "uuid": "e42fca36-a244-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.208.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544208, "uuid": "9a22f441-a21f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.91.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731604924, "uuid": "f79bb7d3-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.44.144.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556984, "uuid": "5940c916-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.235.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731598266, "uuid": "776f8d22-a29d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.116.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594845, "uuid": "7fd4d8b2-a295-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.66.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731621305, "uuid": "1b72d7fc-a2d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.239.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599524, "uuid": "6538d3ce-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.255.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550565, "uuid": "672403de-a22e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.122.112.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72ce050-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.178.190.254", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571444, "uuid": "03be38ef-a25f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.226.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731592263, "uuid": "7d545d72-a28f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.251.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546184, "uuid": "3403d4fe-a224-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.254.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573784, "uuid": "769f670f-a264-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.215.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594484, "uuid": "a9163ed1-a294-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.191.178.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581705, "uuid": "e7f2ffa5-a276-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.8.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611043, "uuid": "3717a819-a2bb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.162.149", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552183, "uuid": "2bd643e9-a232-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.200.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731621483, "uuid": "85c85dff-a2d3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.204.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565744, "uuid": "be70217f-a251-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.253.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595624, "uuid": "508ed778-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.73.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72ceaee-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.206.52.179", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623524, "uuid": "4661454d-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.224.28.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606544, "uuid": "bd0427d3-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.227.185.10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72c99ff-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.115.131.110", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546844, "uuid": "bd854f3c-a225-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.16.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731603543, "uuid": "c098e7aa-a2a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.234.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543544, "uuid": "0e0e6746-a21e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.128.155.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550023, "uuid": "24671b29-a22d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.131.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547808, "uuid": "fbdbfa0f-a227-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.137.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581405, "uuid": "3540aad0-a276-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.228.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617944, "uuid": "483ae4e7-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.34.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597543, "uuid": "c87885e1-a29b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.138.176.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566225, "uuid": "dd06f10b-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.20.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546724, "uuid": "75d2f062-a225-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.64.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564184, "uuid": "1cc38f66-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.80.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557464, "uuid": "77786d81-a23e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.159.71.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564184, "uuid": "1cc39e80-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.183.165.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548644, "uuid": "ee0912aa-a229-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.193.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543305, "uuid": "800aab7a-a21d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.21.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731558670, "uuid": "4612c04e-a241-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.23.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619623, "uuid": "3116ff47-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.245.4.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599764, "uuid": "f3f40ed2-a2a0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.197.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545884, "uuid": "8120ccb9-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.198.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552364, "uuid": "9791ed6c-a232-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.77.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555724, "uuid": "6a30769a-a23a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.77.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618605, "uuid": "d2680ad8-a2cc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.127.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556984, "uuid": "5940b8fe-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.149.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566824, "uuid": "42407bb8-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.152.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616446, "uuid": "cb21eb5d-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.2.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565207, "uuid": "7e4fe811-a250-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.71.194.40", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582364, "uuid": "70da2827-a278-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.172.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550744, "uuid": "d1b8665c-a22e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.218.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595024, "uuid": "ead4be01-a295-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.25.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584105, "uuid": "7e7b60d4-a27c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.3.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731598684, "uuid": "70518c65-a29e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.126.75.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588543, "uuid": "d40bcb31-a286-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.25.188.133", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72c5e9a-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.33.229.165", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72dd03a-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.33.231.115", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731626763, "uuid": "d0cca936-a2df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.81.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627483, "uuid": "7e01a5f3-a2e1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.202.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601324, "uuid": "9608341c-a2a4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.240.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731584944, "uuid": "725cccb4-a27e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.82.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731543544, "uuid": "0e0e910e-a21e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.240.88", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573245, "uuid": "354975e2-a263-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.252.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582007, "uuid": "9c469e23-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.108.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579963, "uuid": "da0af4cb-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.193.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731626705, "uuid": "ae0c471e-a2df-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.224.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731611944, "uuid": "4fff4491-a2bd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.226.223", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594184, "uuid": "f638a23d-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.195.90.78", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vba", "colour": "#d5ccfa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566225, "uuid": "dd07142b-a252-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.153.143.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618245, "uuid": "fb672a55-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.230.109.4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579606, "uuid": "0530cf6d-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "15.235.149.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572584, "uuid": "ab5daaff-a261-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.81.124.24", "Tag": [ { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620644, "uuid": "913baf1d-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.18.27", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582065, "uuid": "be845956-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.208", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546064, "uuid": "ec5a325d-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.20.136", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618905, "uuid": "8524e22d-a2cd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.154.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567124, "uuid": "f4d2da1c-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.165.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608944, "uuid": "53c23293-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.193.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605763, "uuid": "ec018fc3-a2ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.127.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731604444, "uuid": "d98ff836-a2ab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616143, "uuid": "16ab4b0a-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.95.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551105, "uuid": "a931cc9a-a22f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.84.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731609784, "uuid": "4870f8ba-a2b8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.94.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619563, "uuid": "0d6b59f9-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.97.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731621243, "uuid": "f6c0c211-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.8.28.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582065, "uuid": "be823488-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.96.136.133", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617344, "uuid": "e28eccc0-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.119.193.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731614105, "uuid": "5835023f-a2c2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.229.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731558670, "uuid": "4610d7e2-a241-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.30.2", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731603723, "uuid": "2c1a2089-a2aa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.60.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581705, "uuid": "e7f306a4-a276-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.199.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616564, "uuid": "117062b7-a2c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.249.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545884, "uuid": "8120ed9b-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.117.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731572823, "uuid": "3a11b4ed-a262-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.120.249", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731560644, "uuid": "dedffbcc-a245-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.34.235", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554465, "uuid": "7bcd19af-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.41.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555246, "uuid": "4d595069-a239-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.71.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620944, "uuid": "448ad88c-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.78.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600606, "uuid": "ea053da8-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.92.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548705, "uuid": "1295523d-a22a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.154.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555724, "uuid": "6a306acf-a23a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.229.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568805, "uuid": "df1c534e-a258-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.11.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585844, "uuid": "8b05ef8b-a280-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.165.8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597007, "uuid": "88e31911-a29a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.209.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597484, "uuid": "a4effa58-a29b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.129.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731607444, "uuid": "d5a93a99-a2b2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.23.158", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563705, "uuid": "ff28703b-a24c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.103.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731548045, "uuid": "88fa1303-a228-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.155.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546124, "uuid": "1045a66d-a224-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.176.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566884, "uuid": "65de948d-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.29.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553923, "uuid": "38d9912c-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.34.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731560465, "uuid": "73f9c211-a245-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.18.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601809, "uuid": "b6bf7075-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.246.159.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619143, "uuid": "1305dffb-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.7.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72d05aa-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.30.202.184", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72c7cfc-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.30.204.52", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a730ea90-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.30.204.59", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546064, "uuid": "ec5a5509-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.235.128.145", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596284, "uuid": "d9cfb901-a298-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.93.132.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588243, "uuid": "212f5296-a286-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.49.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565207, "uuid": "7e5beeab-a250-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.106.191.218", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546064, "uuid": "ec5a7487-a223-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.138.195.39", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567483, "uuid": "cb4a6e51-a255-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.233.112.194", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559263, "uuid": "a790c157-a242-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.246.69.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589266, "uuid": "827a363b-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.59.134.66", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570484, "uuid": "c7c7ceb9-a25c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.84.95.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546784, "uuid": "99485268-a225-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.210.190.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553624, "uuid": "8670d09e-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.110.15.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553265, "uuid": "b0b90579-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.110.3.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575105, "uuid": "8a0d45ce-a267-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.110.41.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625864, "uuid": "b89f96bc-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.250.127.120", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573965, "uuid": "e2789158-a264-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.16.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731560644, "uuid": "dee05302-a245-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.175.11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590583, "uuid": "94048bab-a28b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.17.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600484, "uuid": "a159b296-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.20.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a73c1a62-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.222.173.104", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554165, "uuid": "c91eea00-a236-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.3.55.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610623, "uuid": "3ca1bb92-a2ba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.129.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549783, "uuid": "953a3ce0-a22c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.86.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731621724, "uuid": "155d9e94-a2d4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.114.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574744, "uuid": "b2c38a64-a266-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.182.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731573484, "uuid": "c3db1a26-a263-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.19.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627125, "uuid": "a8a21c07-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.207.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731566525, "uuid": "8fdf1a7a-a253-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.75.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574144, "uuid": "4d4520e7-a265-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.229.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625624, "uuid": "29c25592-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.183.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731598444, "uuid": "e14046f7-a29d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.194.104", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622683, "uuid": "51066379-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.220.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577984, "uuid": "3e0407c5-a26e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.241.48.205", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551708, "uuid": "10295cc5-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.40.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623583, "uuid": "697c98ce-a2d8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.88.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588964, "uuid": "ceb5aae3-a287-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.11.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616923, "uuid": "e7ce6b91-a2c8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.25.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569529, "uuid": "8e8fbd92-a25a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.15.8.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595744, "uuid": "980f8ba1-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.102.130.160", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595324, "uuid": "9d74fb9e-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.102.130.176", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731563044, "uuid": "7542506a-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731552005, "uuid": "c19c0b0f-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.103.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731613084, "uuid": "f72caf3a-a2bf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.109.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602344, "uuid": "f5f33677-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597183, "uuid": "f1eb8669-a29a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550207, "uuid": "919b847a-a22d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731607684, "uuid": "64c275b3-a2b3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586324, "uuid": "a9320104-a281-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599223, "uuid": "b1be5e1a-a29f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.179.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731561306, "uuid": "6987dcf3-a247-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.179.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595084, "uuid": "0e7eb048-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.180.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606063, "uuid": "9ed43e6d-a2af-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.181.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574264, "uuid": "949b1980-a265-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.245.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553144, "uuid": "68797757-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.9.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617164, "uuid": "772cff9e-a2c9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.177.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731598143, "uuid": "2e0a156d-a29d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.101.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581164, "uuid": "a5ad5b33-a275-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.226.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579606, "uuid": "05337888-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.60.13", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585006, "uuid": "97a2bdcd-a27e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.93.32.243", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731592684, "uuid": "77e75d11-a290-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.242.215.198", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72d1a26-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.242.241.140", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554407, "uuid": "58fb305f-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.62.3.144", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549843, "uuid": "b91df9f5-a22c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.160.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585244, "uuid": "253fe079-a27f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.157.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545106, "uuid": "b11852c5-a221-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.197.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602107, "uuid": "688f5a57-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.10.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623284, "uuid": "b6dbd4f2-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.118.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731546784, "uuid": "99483ecf-a225-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.174.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731560105, "uuid": "9d3a6f7f-a244-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.196.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595443, "uuid": "e4c8e5ee-a296-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.197.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551708, "uuid": "102b7a90-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.212.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608764, "uuid": "e87cb17c-a2b5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.28.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731598444, "uuid": "e14044af-a29d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.73.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589444, "uuid": "ecfc6445-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.199.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618423, "uuid": "65e8c714-a2cc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.177.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570005, "uuid": "aa69f067-a25b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.105.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551824, "uuid": "55a22552-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.235.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731608944, "uuid": "53c2355a-a2b6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.218.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559383, "uuid": "ef55cf43-a242-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.187.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570605, "uuid": "100a675b-a25d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.94.240", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545643, "uuid": "f196d814-a222-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.107.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556443, "uuid": "16ebff2a-a23c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.158.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547264, "uuid": "b79cfb67-a226-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.44.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731600244, "uuid": "12417dec-a2a2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.66.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555246, "uuid": "4d59ba42-a239-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.88.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731592144, "uuid": "364bdea4-a28f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.195.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731585184, "uuid": "01e4fd14-a27f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.246.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583384, "uuid": "d0c409d5-a27a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.66.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570184, "uuid": "14c8c5cb-a25c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.224.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731598805, "uuid": "b870d00f-a29e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.228.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544443, "uuid": "265ca050-a220-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.200.125", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606606, "uuid": "e238e790-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.225.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625983, "uuid": "000f6aaf-a2de-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.24.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606606, "uuid": "e2396216-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.162.100", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580924, "uuid": "16b88efe-a275-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.165.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562865, "uuid": "0a5d5cac-a24b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.18.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565084, "uuid": "3544a0f9-a250-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.229.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622805, "uuid": "99da5437-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.248.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731558845, "uuid": "aea9e591-a241-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.1.242", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625444, "uuid": "be56a5d6-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.67.84.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731569943, "uuid": "85821214-a25b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.72.71.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545045, "uuid": "8cbc3508-a221-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.175.153.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72c0d87-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.75.142.232", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731610144, "uuid": "1ecf32a9-a2b9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.216.97.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731561244, "uuid": "4475a6e5-a247-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.20.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599343, "uuid": "f94306ed-a29f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.43.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731596644, "uuid": "b0531c9b-a299-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.154.0", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568206, "uuid": "7a45afaa-a257-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.249.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731561008, "uuid": "b78e8a03-a246-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.250.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595744, "uuid": "981013d5-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.66.250", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587643, "uuid": "bb7e7ed5-a284-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.75.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553624, "uuid": "8670ab2f-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.83.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731624365, "uuid": "3b88473f-a2da-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.102.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571324, "uuid": "bc8fde76-a25e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.106.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731577031, "uuid": "05d8edbf-a26c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.127.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586805, "uuid": "c80b13e1-a282-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.134.196", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549005, "uuid": "c5a10fc5-a22a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.170.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731606305, "uuid": "2f0c6f9f-a2b0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.241.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590344, "uuid": "0568bda9-a28b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.62.92", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a72f907f-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.58.200.171", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564305, "uuid": "65265a99-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.154.137", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567244, "uuid": "3c843c2d-a255-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.182.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553445, "uuid": "1bb90fb6-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.2.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554465, "uuid": "7bcc667f-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.236.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570243, "uuid": "38331a41-a25c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.245.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545224, "uuid": "f7a5a54b-a221-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.5.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731618066, "uuid": "90ce6512-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.6.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731595564, "uuid": "2cec8cff-a297-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.9.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731592144, "uuid": "364bd97d-a28f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.199.64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544443, "uuid": "265ccbff-a220-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.68.138", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564424, "uuid": "abde3dcd-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.69.85", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553806, "uuid": "f33998d4-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.70.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564305, "uuid": "652681f3-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.160.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731604564, "uuid": "212ac718-a2ac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.164.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616267, "uuid": "60c3fdb3-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.76.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553324, "uuid": "d37ba082-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.79.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580328, "uuid": "b304bb96-a273-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.93.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731605527, "uuid": "5f5ac3ef-a2ae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.47.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731616446, "uuid": "cb22254a-a2c7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.82.10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549005, "uuid": "c5a1280a-a22a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.92.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568264, "uuid": "9c7ded02-a257-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.93.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731627066, "uuid": "8523f06b-a2e0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.95.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554284, "uuid": "0fec7526-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.95.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731562684, "uuid": "9eb5da74-a24a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.211.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731599884, "uuid": "3b678d6b-a2a1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.117.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622983, "uuid": "03bb8f18-a2d7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.119.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731587643, "uuid": "bb7e8e35-a284-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.125.54", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731568564, "uuid": "4f8ee4f8-a258-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.138.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731567064, "uuid": "d16b61ce-a254-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.209.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625564, "uuid": "05d65dfd-a2dd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.218.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731544024, "uuid": "2c579642-a21f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.218.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731551824, "uuid": "55a24512-a231-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.39.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731625383, "uuid": "9a5650b7-a2dc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.88.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731574504, "uuid": "23f94ed2-a266-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.90.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731559143, "uuid": "60444318-a242-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.161.75.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731564305, "uuid": "65267a32-a24e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.89.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731549305, "uuid": "78075215-a22b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.21.174.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731586024, "uuid": "f655337f-a280-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.71.208.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557464, "uuid": "7777ef9c-a23e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.219.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731557944, "uuid": "953d56af-a23f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.224.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553208, "uuid": "8e3fc394-a234-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.230.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731571506, "uuid": "28c1d6d9-a25f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.232.178", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579963, "uuid": "da0b00e4-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.242.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731597904, "uuid": "9fa4229f-a29c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.198.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731593105, "uuid": "72ee207d-a291-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.108.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731545406, "uuid": "64123d11-a222-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.114.5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556807, "uuid": "efff2aa3-a23c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.141.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731555484, "uuid": "dadd5790-a239-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.218.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731602344, "uuid": "f5f34e33-a2a6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.22.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731558305, "uuid": "6c98cd00-a240-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.87.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731554344, "uuid": "33a5e320-a237-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.99.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617944, "uuid": "483ad315-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.216.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731590583, "uuid": "94048f50-a28b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.32.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731570543, "uuid": "eb23134d-a25c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.37.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622744, "uuid": "753e9780-a2d6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.122.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731553564, "uuid": "62c40a68-a235-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.140.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731601809, "uuid": "b6bdba62-a2a5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.254.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731623944, "uuid": "403cb6ef-a2d9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.72.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731615906, "uuid": "892bf159-a2c6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.91.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731626343, "uuid": "d671dba3-a2de-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.26.81.234", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731547324, "uuid": "db1c5a7a-a226-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.52.140.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731603606, "uuid": "e64105bd-a2a9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.188.251.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582065, "uuid": "be83d1b8-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.120.125.191", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "HRV", "colour": "#228800", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731588124, "uuid": "d9f377d9-a285-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.19.14.250", "Tag": [ { "name": "db0fa4b8db0333367e9bda3ab68b8042", "colour": "#b5855d", "exportable": true, "hide_tag": false }, { "name": "dlr", "colour": "#882CA7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "selfrep", "colour": "#7da8df", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false }, { "name": "Yakuza", "colour": "#4ab6b1", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589266, "uuid": "8279fd63-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.116.51.186", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1731582065, "uuid": "be842319-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.121.142.188", "Tag": [ { "name": "jpg", "colour": "#89f234", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731591067, "uuid": "b43e8366-a28c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "akrien.wtf" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731583925, "uuid": "137f0952-a27c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "bot.suqi.bf" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581944, "uuid": "76685ccd-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "bugijepakx1c.b-cdn.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731621005, "uuid": "68e5ad98-a2d2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-defac18.studyzone-investmentguru.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731565207, "uuid": "7e5f4167-a250-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn.download.pdfforge.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731581824, "uuid": "2ef22db8-a277-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-salchechon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731592025, "uuid": "ef7a7e72-a28e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "ddec1-0-en-ctp.trendmicro.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619683, "uuid": "54f328cc-a2cf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "device-aa45f06d-6bfa-4090-83ce-e0bc28df1f5e.remotewd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731620823, "uuid": "fc812161-a2d1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.document-sharing.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731550925, "uuid": "3db51c93-a22f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "dwqjh.cloudid.teacherhamish.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589207, "uuid": "5fc0eca4-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "getgrass-earn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731589207, "uuid": "5fc76382-a288-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-gpt.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731622205, "uuid": "34186756-a2d5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "mubjahuke.b-cdn.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731617884, "uuid": "24759c09-a2cb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "ngt-techs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580924, "uuid": "16d3aee9-a275-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "njprfirm.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731542465, "uuid": "8b077918-a21b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "panel.noxichosts.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731594184, "uuid": "f64d8203-a293-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "qdofg.strategies.mvpstrat.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731556865, "uuid": "11ffa2fe-a23d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "quit.do.am" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579606, "uuid": "05416666-a272-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "sg-singapore.allsafevpn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731579126, "uuid": "e704f77a-a270-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "store6.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575583, "uuid": "a746803a-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmi2145130.contaboserver.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731575584, "uuid": "a7daccad-a268-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "vps-d21ef853.vps.ovh.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731580506, "uuid": "1d39183d-a274-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.mspa-constabulary.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1731619443, "uuid": "c5f21030-a2ce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "xke.range.cccinvolve.org" } ] } }