{ "Event": { "published": true, "date": "2026-03-09", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-09", "timestamp": 1773101726, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "47fd4e68-2443-4ac1-8ee1-d64b1da6c047", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773014445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014445, "uuid": "4de476e5-5aea-45c9-919c-1feb799fb5a6", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014445, "uuid": "e1c47552-6805-4c96-b9b0-82d165b9e1d9", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773014445, "uuid": "07c50cd9-45a0-4880-b186-bafe38ce49e2", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773014445, "uuid": "19003c93-37c1-4fbe-9065-dd5138abd3dc", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773014445, "uuid": "c47a95fb-dc8b-420c-9b35-fa216e04a437", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773015497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773015497, "uuid": "cabae4e3-07a5-4756-b4c0-8635a6720886", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773015497, "uuid": "0950269c-92b5-43da-b21a-4a0bccc8b45f", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773015497, "uuid": "bd2d049d-456a-4519-8d0e-4394db1cd36c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773015497, "uuid": "4c595543-b5d7-4df5-8b26-414d8d7c86fa", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773015497, "uuid": "d2e2ee5c-f2a8-4eac-a8a0-06aaae4abd4a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773016456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016456, "uuid": "5b96138e-1aa3-41d4-b2e3-ee61535c6c98", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016456, "uuid": "402d1851-766c-4d26-90f2-85c6b15b5f74", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016456, "uuid": "929a333e-aeaf-46dd-93f4-d4cba68f24b0", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016456, "uuid": "bc9681f7-e98c-4c0b-8283-d531444a2b14", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773016456, "uuid": "ac5df20d-1450-470f-ae70-68dc2860c7ee", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773016456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016456, "uuid": "cfff7e23-0741-4828-94ad-f8fd3c809c23", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016456, "uuid": "966c7954-7a0b-47df-b5b8-235b61011c1b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016456, "uuid": "9f21fdfd-277c-4cea-b6dd-13d74793f0c2", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016456, "uuid": "101532bd-00ac-48f8-8a5b-256ee0269460", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773016456, "uuid": "dce959ba-dea6-4167-8825-ff6a0f1fb4a0", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "732ec4c0-1b54-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773018494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018494, "uuid": "87db7941-dea1-4bd6-bf46-8128c8dfdb7b", "comment": "Malware payload (Mirai)", "value": "d035f7eea74b0af6d04fd458c1b7715c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018494, "uuid": "869278e4-20cc-4cbc-a4dd-1f3a97a64307", "comment": "Malware payload (Mirai)", "value": "bf814c9f566f3f01e7bfbbd2c92e4b8cf94ff06d0eec2784009f6482301f9ce7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773018494, "uuid": "1d187939-fde9-4582-834f-bacf5b9848d1", "value": "T1D1140981B9017F73C1C2ABB6B7DFC2553B736A1497DB3301AA59BEB02F0668D1E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773018494, "uuid": "10c89a88-d4ca-484a-b21a-e5b562114307", "value": "6144:3VtxOY42kxr8V7MGHpvb0NyYCKZcZSmTmPw0l+:3VmY42M4qKvb0NyTKaZSmTmPw0l+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773018494, "uuid": "0d653a09-53ff-4093-af4a-51f7dd53a1bc", "value": 207375, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773018494, "uuid": "9e0d63c9-cec5-4e75-8238-8e6b03e94b18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b4390b3-1b58-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773020199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773020199, "uuid": "6b03bbbc-0704-4a34-a93d-b6607ac14e20", "comment": "Malware payload", "value": "290f4aeb7208024539f1e289fe6cee74", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773020199, "uuid": "6b678ffe-122e-4fe2-9f7a-2978bbf55362", "comment": "Malware payload", "value": "7532cd95ad9fa18a64673685064258632b3ff4b3028cb77e968a3be5fae2148e", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020199, "uuid": "f85205e4-a7c2-4fde-b402-327ee1738268", "value": "T1BD46CFA1E1AEB8B2D3AA843EC37D4A3942D9D82B05F7FB72A9F1586510035F771135", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020199, "uuid": "11800eb5-4803-49f9-8523-041d53f805e7", "value": "903cdf1ef9d315fcd2c563c14b28e134", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020199, "uuid": "79b0a0c3-0e98-46e5-b019-c08fc8e13bb7", "value": "98304:6KmlHMY9rdkwwW0CqJPqRFNIFbQqVbYNPlnLX1CN0/4wvzcTD:eRdkXdhAIJ5RYNPpX1CNzw7cTD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773020199, "uuid": "82105db6-5e36-43d9-a041-59cc37ef5145", "value": 5498178, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020199, "uuid": "485561da-a1d1-464e-8e67-bd17dbaf7f0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f8dad34-1058-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "51e521a9-04a9-4986-b2ba-c2d75f57dc1c", "comment": "Malware payload (Mirai)", "value": "6b6e457dc195a08cfe9ef759b072a414", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "e4b8a643-bc43-4686-bab8-6c0907fd7e49", "comment": "Malware payload (Mirai)", "value": "6dad85b41766565cbca069f8ef55f2140081e10e9ac2ab5f992977d88afc20c8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021186, "uuid": "27c0df63-ffba-4a33-82d0-4ed45f8a82f5", "value": "T1FE63022EEB47A785DF68DC7ED0AD02142E4C6489161E0E1DE3B14DC8CB21EC9F85D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021186, "uuid": "ae962884-fe05-4434-b540-cb3897c31dac", "value": "1536:xNQXvfpiDy8Mu25Di3SqRJF74nHNjx7ibzaU97TCs0jpF0KrR7dI0+LH:xeX3txu2xgXN0ntjx7eznDAF/NIj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021186, "uuid": "67c60df0-9598-415d-a1e5-643710e3a507", "value": 67780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021186, "uuid": "f100079d-0634-4b53-8f5d-20ee8c7a77b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f29ed7ca-1057-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "29b11efc-e864-4617-954d-af9ecdcacf70", "comment": "Malware payload (Mirai)", "value": "63abea2e238e5fbc62efaaca3c1e6235", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "0549d064-0cc3-4b6d-8e6c-fea1fa4b75be", "comment": "Malware payload (Mirai)", "value": "08733e9ad76233bde5c63adfa861aaca62d542c1eac4cb2bb02d2fd78a9baa13", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021186, "uuid": "25ceefe3-57e8-4f8c-af92-5efbf6938d4c", "value": "T18D53F1D6624A664EFCA384F396D953E87F774E23F6810C0429ACD2CBC4265E1B4C9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021186, "uuid": "81a79205-b711-4541-9227-a5181cc5e81d", "value": "1536:ivsNVnBECay3WAH8ByWyW1bCQ0QfA5qR2tQydlbmSVSs:iUHnB1H8BJy60/KCVj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021186, "uuid": "34a8c2ab-7143-44db-aeb0-aa4a31e07e49", "value": 65284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021186, "uuid": "dbc6c614-5d4c-4bb3-913c-8100dc857616", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f752f6d9-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021293, "uuid": "05fa8173-f684-4c09-a08c-0c10c12609f1", "comment": "Malware payload (Mirai)", "value": "6ff6bd679ef157106b7250b393e837e6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021293, "uuid": "eadfae6f-fdb7-4a38-928b-115e4337bc86", "comment": "Malware payload (Mirai)", "value": "271c4e74701bceebf3afdadf3a9564d29debdc568b3696386637a6c3b1d8b405", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021293, "uuid": "ac7b3fc2-c799-402d-8c87-8a064163b00b", "value": "T192141743B9917DFBC4C2DFB557DBE51148A3F8391B63220673E8ADE51A0DED86E086", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021293, "uuid": "3e875b1a-1de1-4f1e-a28b-2ffebcf305d4", "value": "6144:5b0TYUAtkfMR7Dv8KNCYTl7ZLLHtJ3Itt:5b0TYqkDv8KNC4l7ZLLHtJ3Itt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021293, "uuid": "8439413e-c6b5-443c-93e2-c51ebe52693c", "value": 206442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021293, "uuid": "c02b985d-234d-48af-868d-53dedda6ee5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5def612-1053-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021417, "uuid": "9e21385f-763a-45ce-93d8-31b19f1b1ddb", "comment": "Malware payload (Mirai)", "value": "c4477fac81ee6e98631aa0b28a1fc35d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021417, "uuid": "ce5718e1-f3bb-4dbb-bb3b-0f55352927f8", "comment": "Malware payload (Mirai)", "value": "577501bc8e4dd6ce74fe4496624a3c568457e210c724d01cb87eb874cceac511", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021417, "uuid": "699a897c-63ce-46fa-9467-ed9bbd699df8", "value": "T1CF33F1AE96E68FC5E4756131980E27438928B3A707C4C897F5CC31B68B7B7611B1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021417, "uuid": "04558e3d-325f-4275-ba14-29a9f0384161", "value": "1536:K81XwgDknGmc/9uUADvvtasqb2Mfo4JOdEJnouy84:j1hknGmc4Ri2Uo4EEZout4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021417, "uuid": "fd2c41eb-4161-4530-b8ef-db45e9a81802", "value": 52748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021417, "uuid": "4af3ce86-6f28-4e5a-b229-d9ebf5256f72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6895b9dc-1b5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773021483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021483, "uuid": "d07bf551-1f87-414d-8de0-7585b389cf86", "comment": "Malware payload (Vidar)", "value": "188069b6a059a5b2fafd2fb3a2aa88a4", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021483, "uuid": "dbd43d8c-fed7-4187-b1ba-c2a2be725faa", "comment": "Malware payload (Vidar)", "value": "17d6bf4c49062995225871d44a091d0f1fa62fea653a6a6815b15a97c3327c42", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021483, "uuid": "ee490865-8ec4-4782-851a-716e2fa27633", "value": "T190242321B902FC5CDA316177F6F363409172781542CAF5FB2ED2B98CA521F83468A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021483, "uuid": "83074d0c-7ba8-4d0e-b69c-ee03991f9c90", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021483, "uuid": "bfa4ae72-30ad-4cb0-99e1-40c55e85de5c", "value": "3072:hfU53ZR5xeumR8OdBi/bm1IJohPsJJ0uMJgRYCnc5SZwY9m6CGGidPzIZkhJOXnD:hfU3txADdBYSgoJbsfZwY9m6CYdrVJy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021483, "uuid": "04f899ca-3727-4039-b39a-63796edb00eb", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021483, "uuid": "d45ae8e4-d87e-4550-9915-bc9d89bbc01b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a567ac5e-1b5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021585, "uuid": "984ac90c-70e9-4042-9fb0-41739b34dd6e", "comment": "Malware payload (Mirai)", "value": "471c2ce766eb496515dc2357f1939e4d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021585, "uuid": "841564cf-37ba-4ce7-b196-fc261479e509", "comment": "Malware payload (Mirai)", "value": "b6ee6eb7d33a8c2e4963c32e078d3a86e7d3a96a3eb78b699996136f3a4c297a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021585, "uuid": "d34100ae-71a5-4bdd-8429-05ed7e22a447", "value": "T1A344E7076B517EB7C4DBDE7306F6C60024CEF45327A0672A72B4DA6CB91A94F0993C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021585, "uuid": "07a19efb-1d18-4061-8a4b-5c57db42ea1b", "value": "6144:bnI3XtV9CaLTCTc/RpKEbmvL50ZNxPtHyGtyTlHI1:rINLCO/LKEbmvL50ZNxlHyGtyTlHI1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021585, "uuid": "201cf0d2-b96a-4f96-82f8-db6ae72f9c9f", "value": 257279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021585, "uuid": "c095161a-5403-49b1-b85d-d03be490340c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4ebe468-1b5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021692, "uuid": "d3b34b8e-5541-4910-8de1-6d683d3d61aa", "comment": "Malware payload (Mirai)", "value": "bc2b0fe1f43883d554ea75ffb51cfa21", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021692, "uuid": "82f7127a-f7db-4596-b190-4406d0c2af69", "comment": "Malware payload (Mirai)", "value": "81bec5933e0561d3f6685358bb9e7362ed3c63c373e6592e3d387664a5081d93", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021692, "uuid": "0fb097b8-de08-4342-8c1c-c6d7e1c79bc5", "value": "T14F2418C3B905FEB3F48BEB7204D3872171B2BB614B531622B29779759A3A2C43426F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021692, "uuid": "c17f7b34-70e9-4a90-ac83-2e389baf7316", "value": "6144:JF8I9yZEgL2rBJ276kxULjq9pNvY0NlYd8zeyKNP63Zt+:B27KqVvY0Nly8zeyKNP63Zt+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021692, "uuid": "a0491975-44d0-483f-963d-efad57d21ab7", "value": 213544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021692, "uuid": "0c3d37fa-c074-4ff6-a52b-992c0e155a75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efe9c206-1b5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021710, "uuid": "ca0c0eda-917d-42f6-b220-15c428b904e5", "comment": "Malware payload (Mirai)", "value": "d25466c9de6c3ef783d9de2defe3451e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021710, "uuid": "24b614fd-81dc-4bbc-b0a4-e18be674b7fd", "comment": "Malware payload (Mirai)", "value": "da808c541f3d5a295f96863e1b605b23cdb7f69a2e2bc5d017a1c4616c1298cf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021710, "uuid": "68283c31-c0c3-4326-9285-d0513a908003", "value": "T1B6F319C1AA12FEB3C5C39FB502A7D71006B3E8251B1B8E46F7ADADF4495A4CCB1096", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021710, "uuid": "f5ef5f92-b08f-4342-90aa-9496e9aff6c2", "value": "3072:XWAguFY3M+3oy/ensBypxQbZvNKNnY4872nL8ZZ39tU:XWd3dgsBypxyvNKNnY4872nL8ZZ39tU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021710, "uuid": "248e6648-ab9c-4ec6-8b5c-e637756303e4", "value": 170158, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021710, "uuid": "36920a85-ce7e-4ad8-b571-1d6aeaea05cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04e52687-1b5c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021745, "uuid": "b30761ca-3d6d-4579-9080-2971beb1eb3e", "comment": "Malware payload (Mirai)", "value": "7158148b8095410abd12a47daf4fb940", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021745, "uuid": "f917a29e-f5ee-44a0-a2f8-c05c0676354d", "comment": "Malware payload (Mirai)", "value": "6ed82f4c8f41e9ee28bfeb6aa6e757e85d2d811c4b8ef97476622710c9acf53b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021745, "uuid": "7a44bb15-5d8b-4f18-98f8-4b31e10fc984", "value": "T15B141981771D3E63C1D7EEF026F7E7F043E7A8411B926140F1AEAE945276AB12509F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021745, "uuid": "a39037fd-8307-4c30-b41d-784bb45d3c53", "value": "3072:GS88cSHxDefoxd0bO8+XFjy/2iHvn0AlYd8zeLKNZ63b1+:GZ8cSHxDefoxd0xYFm/PHvn0AlYd8zeg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021745, "uuid": "b5f0e564-e0e8-4fe1-9b21-644cb9663da3", "value": 192446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021745, "uuid": "b36602bd-a70b-4eda-9347-25749ad90ac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c4e59c9-1b5c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773021973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021973, "uuid": "07aaa245-fece-432e-9467-c4a9aead044b", "comment": "Malware payload (Mirai)", "value": "33b5e147808cfe488447a0d21f773c86", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021973, "uuid": "4933fc18-fc1f-4bba-b98b-0f377a84208a", "comment": "Malware payload (Mirai)", "value": "e36505927dcdb61f95ed2b36c3d9620894f57065cd4546137bad6ecce975c3da", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021973, "uuid": "e103b471-1b84-458c-9ef1-ce15440bbd51", "value": "T125243942A511BE73C0C25B79BA9FD24537736B64D3DB3302AA28AFB01F46ADD0E2D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021973, "uuid": "7aa5d2b7-060f-403c-8011-af863d5aa851", "value": "6144:wa8zynX030aECy7G+omS6FW4jFi/I+tmW26AfZTKRuf6Uj:wa8zUXu0aTKG+U6JertmW26AfdKRuf6y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773021973, "uuid": "bd65f7c1-2846-4920-a935-086e36d142af", "value": 221842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021973, "uuid": "774dc969-a109-456f-b63c-fa2c4bc0d355", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e87ec32-1b5d-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773022433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022433, "uuid": "9f931f61-f68c-4237-9315-62339f3482cc", "comment": "Malware payload", "value": "fc01c8f2ea894b2b058761c2cb2a3d60", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022433, "uuid": "41db2fac-b956-437c-a1f0-3a21eb31da91", "comment": "Malware payload", "value": "f810565b1efd5fc81e35efe084fe33bd987486b7fa0ab0dab0f1e7a37acc8120", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022433, "uuid": "536d5262-f5ba-437c-bbc8-254b68465ba2", "value": "T12782DA31B104DD2EE5239FA8E1B5AF7840EDC76ACA1E8C5CF2ACC5551382CBA5B539", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022433, "uuid": "8cd80add-2d81-48a5-a2d7-06fcbcd3106e", "value": "192:P8E2BIUOnNCnvfZZIPPW+emZeTZkrr3p+8wjKmievkvaj069DEGymOgnqzcpmDUJ:P8EuJOnNuv8WJE3psemixS79DEC7kFad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773022433, "uuid": "ff2fc0d4-bc54-4bc3-8584-0a6a64d35ed5", "value": 18706, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022433, "uuid": "da6f8fec-4732-4899-8f97-5ed217fab8d7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a81f482-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773022667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022667, "uuid": "72545e2c-738b-448e-b35f-e970a211ad6f", "comment": "Malware payload (Mirai)", "value": "19f37fb514779abf80fda44df0e99308", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022667, "uuid": "502a6708-c832-4309-99b2-03d98e2d0ad1", "comment": "Malware payload (Mirai)", "value": "182dc5a1e6dbb9027d11e3d9c78b61a7ada2c85e1a282229b2428a869af2f79f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022667, "uuid": "4f37e5bd-c495-4e36-a6ed-5e4df3ae9d8b", "value": "T10A14F981B9017F73C1C2ABB6F7DFC2553B726A1497DB3301AA69AEB02F466CD1D291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022667, "uuid": "d1028652-23cf-4bb2-b99c-c41b6b121328", "value": "6144:emiwIl245rTkOgqSbJxHabnvg0NwYdZZaSV+SRkd9q+:em0M45P0q0JWvg0NwyZ0SV+SRkd9q+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773022667, "uuid": "803ade67-3e4d-4901-b2bf-093f4dbac9aa", "value": 199376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022667, "uuid": "608a4784-8342-4555-b8fc-697941cac055", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c3963c4-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773022751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022751, "uuid": "87d42231-6377-4b3e-bb0e-b13ab23bec61", "comment": "Malware payload (Mirai)", "value": "c778b76eb215655fdc29e5b5146b5f51", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022751, "uuid": "f7ea946c-25b3-43fe-8931-fb8e5edf602a", "comment": "Malware payload (Mirai)", "value": "7cf3f417110eac59f230573294ac93382e1de0848b1596db51102185ae5a91d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022751, "uuid": "ed549781-37dc-4052-aba3-edd9c2e3b088", "value": "T1DD13F1E2E4A5D344EDBE11B628D6228F5440766E4829FDE6C7C12349BB837B5709CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022751, "uuid": "47d9384d-8051-4135-ad28-c8a869d2f81e", "value": "768:wIz4nYXX626Oy6z+R3zjbs/S9EEYZm655F3haSVOsznbcuyD7UHQRj9:lz4nY626Onz+hzjbGMEEgm655psGnouE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773022751, "uuid": "613fa42e-3aa6-4a24-9db4-a281753b11e3", "value": 42920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022751, "uuid": "24183fc4-1e92-44ff-957d-7dd6fd7a31dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bc52c4a-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773023153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023153, "uuid": "c559e65f-cbe2-49f7-a9b8-712a735480c6", "comment": "Malware payload (Mirai)", "value": "6db0ef79b55ea1ad3365bbf76262ad94", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023153, "uuid": "b6b914e9-9384-492e-bc98-5d478ae17080", "comment": "Malware payload (Mirai)", "value": "4e23463d49cd6e4ffaf6a896612f6fdd0b992be6911feb1cd1ad236079441bb0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023153, "uuid": "2867af15-4f17-45ed-a7c1-d6ee7d9ebadc", "value": "T17CA349337E325C7BC5C0A57631E74322E5FA439A50B8961AFD701E8CBB696103317B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023153, "uuid": "196e373a-9322-43b6-ba4b-239640f28795", "value": "1536:oQss70W1J5QgG+aj5g5R1U/wIzZYttMytFo75qDRi/04V0tSybL0Ge7fL:oOEg6j5mR1U/GhDoVckU2L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773023153, "uuid": "6bce1500-2fd9-4e76-aaa3-99e7f0bd7d35", "value": 100564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023153, "uuid": "911183b2-f43b-4c42-8986-0d7e0f5822ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cb7d4be-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773023208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023208, "uuid": "c170d1a2-a110-4c06-8d88-c4c1ddd0d983", "comment": "Malware payload (Mirai)", "value": "9c55a3f8d79261fb949048cc7d39b635", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023208, "uuid": "85471c40-81a5-4cb0-8175-e89da8a7ed31", "comment": "Malware payload (Mirai)", "value": "84dbbefd653fbfb4f0753ceaa757987098a87bf08f792425470d1e8a43bbe0bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023208, "uuid": "8c60f564-ef55-4708-8b5e-d6c849837eae", "value": "T10904F893E9667E77C1C6EFB562A3DA640BD3E8144B430B46B1AADAF04507DCCB8047", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023208, "uuid": "2383f13b-8428-468e-9076-9783292bbf4c", "value": "3072:hxaKAN+UGB0ubxi2Wcz8lZ5tNSlvgCAlY48z79KzZ636tK:raKANHtNjcuZ7wlvgCAlY48z79KzZ63v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773023208, "uuid": "b09344f8-32a3-4ce8-b60d-a36a6277184f", "value": 176373, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023208, "uuid": "0954426e-2518-44e0-93b0-c6dd4259c692", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a0c38a2-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773023579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023579, "uuid": "0b3c6bcb-e279-4de0-a834-81f2abdc5f8c", "comment": "Malware payload (Mirai)", "value": "788c90aefb3dd3577257bf86fdc4ec80", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023579, "uuid": "9002efc9-24af-4141-9f41-f9a9383c4ec3", "comment": "Malware payload (Mirai)", "value": "8e91a2e5e6a396a4a772c8da0a4c8467faa7b7f3d1841289f2f950e7295a92f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023579, "uuid": "574b292e-6994-4a51-902e-a18cd69514cc", "value": "T12F936C41B30D0A57E6571FF03D3F2BD883AEDAD051E4A58A361FAB858271B321487E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023579, "uuid": "a2f9d00e-e529-4f53-ba81-2cbc377c3756", "value": "1536:8nHxZZjOCUsIBppBaUFzUXBRz9WmVBfsglwNoBH3JLgOqAZQWe7u6:89ymIBppBrUXBRIyBNlwNE39b6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773023579, "uuid": "6ec81321-7ece-4e6f-9173-a564996286b8", "value": 93908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023579, "uuid": "ce03bddb-64ad-49aa-a483-6269cbefd368", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fc68e7e-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773023696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023696, "uuid": "86a07ad6-af33-4b93-86d5-5e7b0d848584", "comment": "Malware payload (Mirai)", "value": "ba89899ca32e1fdd52722aa48ad19829", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023696, "uuid": "0f3a96c3-935c-44b6-8139-3902938456d6", "comment": "Malware payload (Mirai)", "value": "23b61b7224532d7695a04057f8725e4b7758053d2057eec1a918a7d57080bf98", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023696, "uuid": "1449018b-2633-48b5-9600-45b5d581fd18", "value": "T11B240A85EA417F63C0C36BB5F6DBC20133B39B54E7A72305A528ABB43F8679D4E125", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023696, "uuid": "a6701ac7-eada-4690-a5cf-0bed2dffc9f3", "value": "6144:BpOt0cw+hah8E816lCvfK6THjicM/RO1mC2ZwPLEl:Bpq0cw+ha6E81QSffXix/c1mCCwPLEl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773023696, "uuid": "a9eb4a3c-ee22-4876-a3c7-dcf78589de0d", "value": 217487, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023696, "uuid": "639a01e8-8f61-457a-9694-eae20507ad00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e89f90a-1b61-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1773023963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023963, "uuid": "ecfff771-540d-4e5b-98c6-8d8543ec926d", "comment": "Malware payload (Amadey)", "value": "6f77e043f0b36d2b5336449f5ecff1e3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023963, "uuid": "3988875d-17cd-4a03-9bec-cbbe823fd4c4", "comment": "Malware payload (Amadey)", "value": "6c790ffb5dc0a86c0dcca2cedae647ced8173e4a2ebf91cb7a864db20873614c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023963, "uuid": "2e3ca5fd-d42b-4057-8b46-2da71f8e0128", "value": "T17C945B217916C032D66292711E79FFF584ADB8259F7109DF7BC00F7699202E26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023963, "uuid": "13653dfd-a87d-4686-9320-4e58074e2f35", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023963, "uuid": "d27654a2-3d05-4947-8899-5e7b06899d3c", "value": "6144:4bzHF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fms4AOk:0HF0VKkWrb4QDwR4QWdyzsAlWZBR8qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773023963, "uuid": "4a447aa4-664c-4c14-89fe-52a4f85a755a", "value": 446976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023963, "uuid": "7caec7bc-49e8-4aad-84b7-f446c305616b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccf76724-1b63-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773025087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025087, "uuid": "1ea32ec0-4bec-425d-a3a8-6731d48319aa", "comment": "Malware payload (Mirai)", "value": "0deae34a55781e3357080226fef362b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025087, "uuid": "fca86631-ad04-450d-aa78-036b258e48a0", "comment": "Malware payload (Mirai)", "value": "d9835a939d62e128218ee067bee4cafd2dcaa6927dec77e52feb9053bb086a1f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025087, "uuid": "f9312f84-f6b6-42e0-9923-974335db1d44", "value": "T148737CCBE643E5B1E9230131813FE7269275DA381054DB4FD7B49A37A836A04FA173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025087, "uuid": "196f119d-5447-47ae-920d-dde38df18bd9", "value": "1536:3MdN083dAYitllnwplWUP7W0AJYbb8etLDKWed4:8E83OYinlwLWWXWEFJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773025087, "uuid": "eb3ca0b9-f76f-47cd-8a58-789eb1a88ae9", "value": 80008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025087, "uuid": "f23a8d2b-92ba-4d50-bb3c-b39e3c1992f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a087ff-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773025315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025315, "uuid": "de67e2c9-7839-457e-a376-6d940024ee7c", "comment": "Malware payload (Mirai)", "value": "81af322e7d3dd7866d9d550cd06b9357", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025315, "uuid": "4975fea8-9796-4ff1-9823-e40d9b55e731", "comment": "Malware payload (Mirai)", "value": "fbde9bc086880d98d11fc0703b12b6553a7538ce9b06a1dbf542f7d164dcd54a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025315, "uuid": "f31c7b09-73f8-4aad-91d2-1589a162e72c", "value": "T19DC31A05AF620EFBD86FCD3742AD0B0624DC5A5223B97B7A7674C828F54958B0BD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025315, "uuid": "94774c92-a639-48a1-a8f2-12499c9d9083", "value": "1536:6QV78fxaCZqfbXGKGSXRACdk53+1VsU18TVzUPtZZg5cHwR2hyHKTDyR3LpgWe75:6LfxrIfGSXj1VB18TVz+tcR2WnN8N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773025315, "uuid": "b01f3678-8e92-4a47-92bc-ddbf05e76481", "value": 120292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025315, "uuid": "559b327d-1505-4665-9935-fe6326a2024f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f16515f4-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773025578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025578, "uuid": "5e2dffc4-7f93-46b6-9b5a-da29b0a1a728", "comment": "Malware payload", "value": "712ca9a6ea9202d432d59ee06ea1da09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025578, "uuid": "4a31864a-3379-4af7-bda6-88eea47c5b34", "comment": "Malware payload", "value": "3117650eae4ffcd32e9bfc723e46e8aa0b6e8b9599d2ac6213e5df72c775cc3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025578, "uuid": "97b0daf1-1d0e-4ab8-87ea-a119407f0d07", "value": "T15CA3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025578, "uuid": "24582dc5-0475-4aff-9e14-4aae0b129737", "value": "1536:24Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAe:PgVBH3mPm+sqk+HAw0F5KijXxe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773025578, "uuid": "47bc19ce-a1ab-44d9-90d0-5d9029195b1b", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025578, "uuid": "daeda1ce-6430-4a62-b877-755f79dcf443", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17d4d33d-1b65-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773025643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025643, "uuid": "392e9ae6-5aad-4ba6-8f8e-699d34d83f79", "comment": "Malware payload (Mirai)", "value": "764b3c4cf5e0517cd88be6a97f1bf3be", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025643, "uuid": "81440bfa-7be9-4633-8fd3-8c0361dd3d1d", "comment": "Malware payload (Mirai)", "value": "47b9a830b5747936deef619b2860e8d42520e4e9c2fcf2ffc991f233fea1a852", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025643, "uuid": "de32ece7-c8c7-45c4-9dde-77dbfe1e4c9e", "value": "T1F8932A91F8819613C5C5A6B7FB5E4259370A4368D3EB3203AD244F76338E89B4F3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025643, "uuid": "9c3d55a1-9b4f-4a83-bbaf-261cb9830483", "value": "1536:qgciOVmlXjOrDTpTugnyXfDMZavUU61gRU9VsZyedG8RO/IWe7N:KoReDTpTugnyPD2avJIVTRm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773025643, "uuid": "3b04fb9d-542e-44cb-b84a-73285a3443db", "value": 95564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025643, "uuid": "93d23b04-f3b2-4b09-b26e-dedd0ed41858", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d663718-1b65-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773025732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025732, "uuid": "838d4a92-86a3-4294-91f6-2b5ca9001d52", "comment": "Malware payload (Mirai)", "value": "a285e15500121ed86dba0397772545a4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025732, "uuid": "baf36c52-272a-49bf-87aa-7e7c6922995a", "comment": "Malware payload (Mirai)", "value": "d4050bee56b3f79a92023e76b099ca6a361acf522476493fbeb73b056a99363c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025732, "uuid": "8dfacaa6-39ba-402d-8a3e-0249f2358d20", "value": "T1E1A33AD7F801DE7BF809D37A44970506B330F7A50A8217B63313695BEC391A95927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025732, "uuid": "e6a7deea-744a-48af-aee2-ba0b34293c82", "value": "3072:zGD0j50lZdbYswvbG35LFBxOz5uoDRyKqWRhDJ:zGYjyHmbG3pFm5xDRyKVhd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773025732, "uuid": "fff3ce6e-f0d7-4676-903b-dd21037d1ff6", "value": 104160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025732, "uuid": "b7328506-b67c-4ac8-9bac-ef22b3f428f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e4bf156-1b65-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773025761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025761, "uuid": "45fe05bb-133f-44bf-9640-9171d2246ebf", "comment": "Malware payload (Mirai)", "value": "7b590a38351a1c5dfc8a9122497e2f3d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025761, "uuid": "4030314c-46fa-4912-ab75-133dc2cca440", "comment": "Malware payload (Mirai)", "value": "7a094cc508986462989a3bcd0cf9b65bdf0c1650f2577218d5398e5564980c4e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025761, "uuid": "2108d81b-e3a7-4376-ada7-8a455a78f045", "value": "T130A30759F8829B12C9C105BAFF4E51893313176CE3DE33169D248B74378BA6B0F7A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025761, "uuid": "371186af-b692-4710-a734-a3cfdcf8b15c", "value": "1536:cqnd6oHk+pgnOF+BPwzYyxcNpa76LOMMni5NX4uaeK07G65Z9KjfWe7pZ:5Hkc+BPWBcNpa7aNXHae3C6dKN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773025761, "uuid": "9c427435-c47f-49a4-9a38-9aa8cf7c786b", "value": 104708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025761, "uuid": "0ec163ad-9e27-4051-a97a-9ed0ee9dbfa0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609e82cd-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773026194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026194, "uuid": "71c8ea21-3327-4e7a-ba57-69066df99756", "comment": "Malware payload (Mirai)", "value": "ad45bad0c4c7a2a050aeedb7df7d5932", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026194, "uuid": "5b99df99-b330-45fe-9b4a-00b35f309ca7", "comment": "Malware payload (Mirai)", "value": "dd71ff5925e16338d8721781040b5219122f515c565f75611dc79fbdf2d4c5e8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026194, "uuid": "1e1ed0b0-2d9b-4880-b968-e4cb9d462e9e", "value": "T16FC3FA5E6E329F6DF16CC33147F79A20D35923C623E1D685E2ACC6055E6038D681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026194, "uuid": "d2eb4796-b708-4e75-a9db-9207203f9f37", "value": "1536:8tEv/wPCY/FM1NbL27j4qjU2d6OPaRX9Y1I/BQqqeup11rpevBT6IictPaebW6JX:8g4PXO5q7SRX9WavBT/ishM5eR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773026194, "uuid": "a7f9a658-c5e2-4a57-9780-311cf5a771f1", "value": 119940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026194, "uuid": "f420dfba-3e8a-4bcb-9842-27209f55975e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e27ecdb-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773026271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026271, "uuid": "0b4e7d58-cec3-43c7-9abc-ed36e11b3df7", "comment": "Malware payload (Mirai)", "value": "e9c4610c4b528eb506af2451c2615934", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026271, "uuid": "adf7f8b4-c35a-4beb-9688-d57e6805a738", "comment": "Malware payload (Mirai)", "value": "1eb2df103a6e10e67af4ba8245d03949bb9c27d4177b6c8c660b5c5c9ee4aecc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026271, "uuid": "349831df-b621-4da2-839e-62efb853294a", "value": "T1E2A32A91B8819613C9C556B7FB5E429937170368D3EB3203EE248F76378E89B0F7A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026271, "uuid": "032c9170-5f17-4325-940c-08174f030e4b", "value": "1536:iG8/i8J+Ycr5WbNb/BdgntX+IP5RqMnSeAvEWtJtwBj3XOuagWe71:cQXGNb/BdgntOIhRqXsD5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773026271, "uuid": "3f35efc9-c913-474a-8134-11454c727117", "value": 99660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026271, "uuid": "73470a48-0e84-40b3-973d-2a7a3aeb8872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f019d4ca-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773026435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026435, "uuid": "707b98fe-c6b8-4a26-8b0e-605fbb34d5df", "comment": "Malware payload", "value": "3e3069520b79c8c3d8ba56700a28604b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026435, "uuid": "65c66352-ba98-4908-bf35-d902445c6ac8", "comment": "Malware payload", "value": "3d89fb1dc5ead0f7f095c23480736bd85da57fba2eb8e10063467ef39ca656ba", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026435, "uuid": "f79cf69b-df56-41ae-b0ad-cf1a52257670", "value": "T1B393093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026435, "uuid": "db2a3573-bcad-42e4-a312-f7695a57178e", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmizPsCZKh6i:pisIbzEStkbFvnw05S4jrFPsCZG6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773026435, "uuid": "755960bc-f9dd-4e9f-8b26-dc9df8b02891", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026435, "uuid": "e949b5c7-2bbd-4fbd-9dd0-bc8e9c49af52", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e87df115-1b67-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1773026852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026852, "uuid": "9c668f1d-f351-4090-9a4a-e855b9aa4328", "comment": "Malware payload (Metasploit)", "value": "bae160067ef98b6f2a8723535065e5b0", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026852, "uuid": "0f81c12f-5a02-4ced-a48d-149b29d35f1b", "comment": "Malware payload (Metasploit)", "value": "ec49c764b10260e93d0117cb98d78af71562fd10d109cafe5e310ecd1d5261c6", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026852, "uuid": "41145168-da6a-4cd5-8385-2eda67eb618d", "value": "T18E81C8383AAF6A444CC30067BDB3A4D9AE101BA6D4F66800F4E5C095FDEB621D7367", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026852, "uuid": "3527490b-f126-4299-887f-db4813d3fd52", "value": "96:w5g9d+FvvOmLmDMslf84W0lE0lLZ80lR00lX3:nEvOfDMsOGXhVx3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773026852, "uuid": "f112d797-746a-4b9b-adbb-f87f466a5934", "value": 3873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026852, "uuid": "ae94094a-8db9-4e90-8213-cc8b1bb35491", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59677237-1b69-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773027471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773027471, "uuid": "3f2a800c-751d-49ee-bc6d-1fc685c9e19b", "comment": "Malware payload (Mirai)", "value": "66b3ab3bd4a32cf1251704093453717d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773027471, "uuid": "c8ba241b-c0ff-4efc-9aac-20bd8762b84f", "comment": "Malware payload (Mirai)", "value": "42bc0e1e7309a256236ea5e46d0ddba04648f1ed6f930870d79f717c177dcae4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773027471, "uuid": "ca9a3f78-073e-463b-8022-c6946c245bb7", "value": "T15A44A5553A22BFBBF1D9C73047B3CA2056D925912BD19746F29CD71C1E2028E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773027471, "uuid": "51d5885a-51b5-4da5-96f7-0f887aa36203", "value": "6144:qASqHHDQgTUyGu6mvu50ZNxPtHyGtyTlHI1:3HLOu6mvu50ZNxlHyGtyTlHI1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773027471, "uuid": "d0758896-fb7a-415a-bd5a-c532b12c634b", "value": 253730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773027471, "uuid": "2bef9790-b8b7-4ae4-a401-e6571e9e77c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773031936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773031936, "uuid": "64c36ad9-635a-4e45-85a5-437f80ea3edc", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773031936, "uuid": "c4ae06bd-7668-4c9e-9e1c-9afe65fc2200", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773031936, "uuid": "ff0fcc4a-99f2-43bb-aef1-cbbbce248e54", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773031936, "uuid": "72e82b20-77dc-4159-adaf-e27a6edc12ce", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773031936, "uuid": "9c8468ae-d481-43ca-9de3-2a6574ce0096", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86895d37-1b76-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773033130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033130, "uuid": "f445462f-32bc-4f54-9edd-f1b3e897cb34", "comment": "Malware payload", "value": "a8e2668893d073b137e685fe433a87c7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033130, "uuid": "6e83f724-2d7e-4b65-9724-49a5ff601197", "comment": "Malware payload", "value": "e6f432cb3240162b16c76425f8a052967bfc78fad0cb3e4286af69c81b24ea23", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033130, "uuid": "89df0a52-249b-4125-b3fe-7db49db92479", "value": "T1F8C4239603689624787407F197BF9F8DC6028E1329921BFD9FC8BF0CA135648995FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033130, "uuid": "b76f40bd-79c2-40f8-8602-5b3092e3f9bf", "value": "12288:EOCBcIqBOliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5h:EZ+tubzqyB9sz4TKPE1l/Zrn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773033130, "uuid": "ce87b194-29f0-4156-8782-8b8704e7a091", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033130, "uuid": "851f9189-ae38-40f2-8bf5-85762591638c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37809518-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773033427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033427, "uuid": "9d7d65f7-b4a7-48c5-91b4-79fb0bb93aa1", "comment": "Malware payload", "value": "34b054ddcfef5027d630d4b064456f64", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033427, "uuid": "fbbe85cc-4a58-4228-b715-a1d247b1d7bf", "comment": "Malware payload", "value": "94aa4f149c9eb7854d0a0cbaa523119e8695b41ef548645b2d63e0d273ce4823", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033427, "uuid": "e4332db4-bc6a-4728-b0bc-05c800a7d3cb", "value": "T1FAC4239603289664787407B197BF9F8DC6028E5329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033427, "uuid": "2b83a81a-4251-45f4-ad56-37b78c2c387d", "value": "12288:COCBcIqBZliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar52:CZ+yubzqyB9sz4TKPE1l/Zr0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773033427, "uuid": "6792a7ce-abcb-4010-bb7d-70dc6a634bb6", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033427, "uuid": "daa2382c-4c30-4807-a99a-6f8439146a00", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9fadfa5-1420-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1773034749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034749, "uuid": "4c109b66-b6de-404f-b2b4-247b6a03a58b", "comment": "Malware payload", "value": "336391d4a69e5e20791a56c8b4c3dc8f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034749, "uuid": "ace97a0b-7038-40b7-9932-81c532278c75", "comment": "Malware payload", "value": "79706d7723d5b923afc6ae017efd3f0b84d9fca0e44993a4340cb80ccdf4d4d6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773034749, "uuid": "49010687-830a-4fa5-a44a-8188154abfdb", "value": "T181C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773034749, "uuid": "d8668957-ff38-4f7c-b401-e5853734b8e3", "value": "12288:v6wlOMWROC/FTeHo22Qm7NzofOr68mNeA924EwCX:34MQOC/gHozN7NzomW87A94", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773034749, "uuid": "d7d6f3ab-e364-4e4c-bdf2-682afb079a27", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773034749, "uuid": "78efba4c-1118-4929-8cd6-0754b1b60fa4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe860a35-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773035049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035049, "uuid": "4a0c5d79-bd22-48a4-a46a-1f67cd21eadb", "comment": "Malware payload (SmartLoader)", "value": "7b86cfff18d3481b193f541f169c93b9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035049, "uuid": "cf02a91b-9f39-4b07-a789-44396ef8248d", "comment": "Malware payload (SmartLoader)", "value": "9aeadffb5b70f36e292b066e1f9928a490c0f9ee8a20178deac2c5da4f1390b9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035049, "uuid": "106857d1-5051-481a-8500-5791fe7b8889", "value": "T121C423B7179AB4897503E3E4814C7D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035049, "uuid": "8715557c-52f3-4f3d-8fdb-28b9e4edf64e", "value": "12288:teElNtIBB2gX3U5IA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezw:teSIBBfHam6Jj6ESfUxZ91kmY/9HeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773035049, "uuid": "5ef9530a-778b-4fa3-9096-81d7020441b9", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035049, "uuid": "288eac3f-fedf-4a08-87b4-fcdbace7e407", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65b8fdbf-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773035652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035652, "uuid": "de2b96d1-6086-4c36-926c-c5eea4f1b131", "comment": "Malware payload", "value": "de057ee0aeb1dddf754d10d861071f16", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035652, "uuid": "dceaa0e5-559a-4514-933a-f07fee1743a7", "comment": "Malware payload", "value": "99d3ac7831b22d9653232879f5043e03b58bc5f0604f86562eb5de57bccc1cfb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035652, "uuid": "dba47d4f-89f1-4123-a1b0-c8ac6e25c77c", "value": "T19EC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035652, "uuid": "7e3e1882-63b1-4614-8537-ea78f11b525c", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byuH9I1P0QKw6FEA:r+QqldA/TSO713u7xnuH9IaQKH9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773035652, "uuid": "0beb65d6-bc02-49da-9811-e814776a93ac", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035652, "uuid": "df04c663-b44b-47a5-87a2-9799fb8020d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cebf9ed9-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773035828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035828, "uuid": "b3065036-83e0-4471-8066-3f81bee3a9e0", "comment": "Malware payload", "value": "27696449053f362c057c03d01dc21c00", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035828, "uuid": "9bed51c7-b24c-4b15-9f4a-41824d2c1adf", "comment": "Malware payload", "value": "1c2b69e79b4d93c0849938cd330c71c8e6cb034136239fa5d46bb9a55a276dbe", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035828, "uuid": "3d04b723-7024-4386-9d6b-4e0096843ae1", "value": "T13CB423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035828, "uuid": "d8222eb2-e8ae-472a-9de5-d0693ab71a46", "value": "12288:/GRl4nbDDGIabs/7iiEVwYg2l3/2NHAy+wK8g:PTabs/7iiWw0Krxg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773035828, "uuid": "89fbcaf0-362a-4998-b925-b8bff3a403c0", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035828, "uuid": "032b0427-3591-45bd-8e54-3a2c7138173d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3035260-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773036667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036667, "uuid": "adc7de49-975e-4d12-b2be-bc9ffae4a1b6", "comment": "Malware payload", "value": "5e11a60eec09dedd0a9c78f30e5a739d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036667, "uuid": "bf570e84-9f25-4f96-ad09-9c57b21cfb27", "comment": "Malware payload", "value": "72a69e7914fc6194dc207afaa4d36ce1210ac41492a512017f9f0fbf776f938e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036667, "uuid": "9e89c111-04b5-4d3f-b54b-a5f119ea3e23", "value": "T1ED33CF52F7B244F5EBB19054E925EB1BEFF530898524AAC723844E422B33D627F4C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036667, "uuid": "b091e4e9-1232-42db-94e7-b76818175c45", "value": "1536:mBNVYg8G9ySHeFqSZ3B/yim/1y1ejY6yFOB:mBLYrgB+jB/yjgf6yFOB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036667, "uuid": "6735300e-66f1-477b-9d14-81fe8e13e8b1", "value": 52811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036667, "uuid": "7ec47312-9cf5-42e4-a762-01589aea5d00", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c323cb8a-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773036667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036667, "uuid": "5231483d-b41d-43bb-8145-37cec88e7993", "comment": "Malware payload", "value": "3558563cb186d82114885f39280ec489", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036667, "uuid": "3fc9ae6c-bf97-4f7e-bcf9-b5435addf4a8", "comment": "Malware payload", "value": "4381edf86baf90900db86277cc44c9b057ed31117b5e2c8f3785005ec04423e7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036667, "uuid": "1595ec27-c076-4dd7-b9b0-763ae6599df4", "value": "T184341293B4FA10FBA792E128ED256B07FBB0747C980061D973546895AB72902FB1CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036667, "uuid": "c2a99784-754d-46aa-a28e-89593ec6be0c", "value": "6144:lNrFufRV9aW8/rdHA5fVUlXz+lCYQb3m4frJ2hn0JRGqm6ysB:lNrFuLwW8RsfKpzXzkhoRBm6JB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036667, "uuid": "0abc029e-0ee1-4893-88c4-80abb94ba8f6", "value": 244299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036667, "uuid": "f31c6cf9-753a-4253-bda6-72f4fd32a0df", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75a4c6f0-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773036967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036967, "uuid": "84a6110c-5bd5-4e88-a203-f6b02c0bb877", "comment": "Malware payload", "value": "6931c0d13db3e93613b8f98279b19b17", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036967, "uuid": "1fcd47c9-3826-4b83-8297-2a21fc1bf797", "comment": "Malware payload", "value": "c211643758da83e2ce64e6829c9b1327999e6b7801110d2199e37bb5ed462bb3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036967, "uuid": "f67bdea5-f142-4587-9d25-8802eec6bcfa", "value": "T165C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036967, "uuid": "a59636ab-6c8d-4b45-8077-4b94cb82c0a9", "value": "12288:RMU+0xq75aS9iYIp6cP/G2Bku89tNvC28c5/VTUPkYy6:V+J71vI/G/Yc5/pa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036967, "uuid": "fe267c1b-7256-4d63-a16c-0a0aaca497a8", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036967, "uuid": "4f188890-e6b6-4012-ac53-4149b30b5367", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78e5890f-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "31378f45-e527-49f2-860e-89d5080a7433", "comment": "Malware payload (Mirai)", "value": "4a75e8dd27444315b59214964a844ccb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "44470409-b1ce-4723-9668-285bcdcf073d", "comment": "Malware payload (Mirai)", "value": "f541bbb76be62aaf18263645c9cf39722431972c750fba33bd702029d92f8971", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "10a91e30-35c0-4e2d-9d8d-aa68fd325e5f", "value": "T1A843E746F603CAF3D45305F101ABAE7A8E31FEEA5822D396E3747DA5D9630C16503B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "dac78cc2-9598-4f08-81c7-49ef57138407", "value": "1536:UUGqZFB05e481/UdeLyyVzx9OkWkmIs2:UUNZFW5e4Q/UdeLBVy5VL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "7ef38e66-5aaa-43bd-9d71-cbdd1ec247e3", "value": 57456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "cb922cdf-129f-4f5c-97fd-45206340b49f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78e6918f-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "22893265-af82-4efa-8cdf-d619a3882099", "comment": "Malware payload (Mirai)", "value": "c874a3654fdeeda25cbbbd653ee4630c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "bdb0c3e7-75f6-4ae2-95c4-ea3eb905af78", "comment": "Malware payload (Mirai)", "value": "91ac5ddad74a971b477d374bb73262b2d1fbcb46bada79d7980fe025f5466667", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "d38f27f9-4d5e-4c24-9f9e-e03f06bd3823", "value": "T1F9433923E9264F17C00355F065E99E325F22BDEA4E571EBAA171EAF84043DCDB405B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "26d1d6bc-36e9-4bb6-a849-06540fbedea0", "value": "768:jRvmK8DU5EN2AuuoQv2t84OtHX/I5E7K+uF3aDuoxnf/TACG0I:jRvTicLxQG8NXvK+uFKDrMCN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "86ab4d82-7fa4-42f4-8bbf-0e88901c37ea", "value": 57680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "18fca15f-bb96-4f53-ab6c-0f0de8123a6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78e848f4-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "0ab47778-23e3-4225-813e-79bc38bc39d5", "comment": "Malware payload (Mirai)", "value": "a3480b4afa54e8e1db8e27657dde32bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "5983c3c6-9f26-4d6c-a51e-968bc799cb29", "comment": "Malware payload (Mirai)", "value": "1542593fc136ada1095a4743dea2ae1cc748483f219449d99d1a4a9983223836", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "47144f67-0618-418c-84f5-7b9df0db171e", "value": "T1FB531A52FD42CF13C5C321B3BB9E4A453B166BE8D6EA32029935BFA137874C70D26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "e4fc5fa5-7e97-483b-a5f0-993a874999c9", "value": "768:cdq7L+I6zVlRbxxL1JAYBRGlNUCXw/cMDwJGtG8+8Cd0OC8xi/0npSMhbpTmaDV/:x7sItNUuoEe+jd0ObLZhFjDhqvJn3O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "ec65a1ac-c123-4f03-9777-97157fe30987", "value": 65680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "8078a9d9-1b9a-4b29-9cf1-f108a679a328", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78f1902a-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "aae8e678-6e77-4c4c-9a0e-9385722f0b8a", "comment": "Malware payload (Mirai)", "value": "267c8c10720d163f5bd75214ab23de2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "dfc0bb34-137f-4117-8455-8c91de670251", "comment": "Malware payload (Mirai)", "value": "c26e56ba27dccd03bcaa88d79c99ab4b745b1d818e8276ab88f2febbdbdd6515", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "0ee1ccc9-a868-42d2-8aa2-ff7cb6bb1a5d", "value": "T1C8532A02B7090F03D1532AF026BF2FF19B59FDE126B5A584752DBEC592719F12182E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "e8e31cad-1210-4473-bc1c-e6f11228f1f9", "value": "768:V5dITn+vaoMbLNfJ0GFXKcLQlyCpS5b2fwXI9YNp4PIvyRmVIew:V5dIz+CoMbBfeGMc8ACpSaY/4PDRcrw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "a8dff5db-2e47-4eac-8bcf-997adfb51e0e", "value": 65808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "e5a6e4f9-ded6-4e81-955c-c33a0e36c4c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78f4eee1-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "1cb1147e-6ea1-4fe0-b0e8-36c86110465c", "comment": "Malware payload (Mirai)", "value": "e92252b97ba294840fbe789f4489bd81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "410fbd98-dc40-48fd-897b-aceb799ed62e", "comment": "Malware payload (Mirai)", "value": "8e6a4d844efd3d5a35dbe03ae9fe56e6d7be214a0fb516bd2c6601511cd84c9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "71ae22cf-b049-4e29-be9a-e3972eba3883", "value": "T155631793F901DF77F40BE3B604D748127530BBE60E925A72722378AAEE760D51922F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "16174cc9-db6e-4e74-8bb8-ed0ada2a8968", "value": "1536:ksCsDpDpqqRUw/AGeEe9C8XA9fwxynZF1UdcOzX2FwoTN:39VBUwdeR9GfwxynZFydc3TN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "6490b08e-b570-4271-a06d-ae53d4fc2d37", "value": 73188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "27a5f92f-4d98-4db0-8d96-f3284fcdea44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78f93927-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "75a321d7-abb5-463a-8d80-69b32d3b23b0", "comment": "Malware payload (Mirai)", "value": "09004e58bf62d8094144d30fe2e74e63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "f3a90159-1f6a-4cb4-96cf-9e46980c4210", "comment": "Malware payload (Mirai)", "value": "73bb2f4b0856beed814c7e28727f9aee38d1d4472f4ceae6cebf8dfc68b6bffe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "f879b831-b640-41f9-9957-968c1ddf625b", "value": "T117532B17BA82C7BBC48B81F41BEF6D229D32B8FA1672719563E0FDA15E55CD02D0DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "ef3171e3-d050-4d42-ac83-8397bf2a51d4", "value": "768:VQ8G9tVjQuswrWYD+gRlC2MO2gMsZ2LgUGbJCnwPBdd58o3r7GHFX9hyvuXh3Rkz:gtVjQwyEljMO2eSgUGbvz3WHpGfBG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "ff62d70a-299b-467e-87fa-90e4408d43f8", "value": 61144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "4cee8ca3-a3fa-44b0-bc37-2867bf2c48fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78f96022-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "cdb23df3-9c27-48bd-b5f5-ccd82e31a9b4", "comment": "Malware payload (Mirai)", "value": "2d9f1d53d142824abf14e3d512ea5191", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "331654b0-a507-499e-90a2-d7964bb2a923", "comment": "Malware payload (Mirai)", "value": "6bce3d42b5c8498a50c00ee135c003bb8a798b4c7514e1c93408bf63fb211520", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "97cc1c85-344e-44b3-8dec-aec0ff3a1f3b", "value": "T16A932A06F9419F01D4D325BAFB9E564937136BFCE3EA7102D9209FA023C69DB0E769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "c039f82a-b827-4d93-bc46-3463e8237a33", "value": "1536:6on7NPuUV2OG5zJxi+l+yQliDxPUhMYqaaKtY7NjUC:RNPzV2OG5z20xPUhhqaaKtmjUC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "6e7c2950-b74a-4708-9701-a6260526ed9b", "value": 90756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "0db26cc5-0f2a-48d4-8ea8-2517c3438c7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78fab6cc-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "90b89b8e-c1f5-4541-b131-342471dcf04c", "comment": "Malware payload (Mirai)", "value": "f85d6fd6cc4eabf9a4c89595d528cd01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "fa6b8cde-0e0e-45d1-9b9c-41299a9c8807", "comment": "Malware payload (Mirai)", "value": "d04ed10757c37c42202eb79f7e2b5745ff8994ff7aec5009fb18aceb032b3235", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "a16a74f6-9c69-41ca-9f14-65b7fb7ab5b7", "value": "T13143F746FA43CF73E85311F112EB6F629D31FEFA2866D582E374BDA099110C1A506F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "424e2c45-8d17-4f46-8f36-234ac5ec0d8a", "value": "1536:zo5/BzniMnZNWc552Vg3OxjeSzWz85UI8:zWQc55UGAZWzkT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "98d4b7aa-1c53-4b06-8cb4-cb85ab92eb4f", "value": 57456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "85fed6b1-9ee2-4aeb-81d3-e0b2f3543945", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78fd1a32-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "1d8c37b4-3427-450c-8cb2-857136713dbe", "comment": "Malware payload (Mirai)", "value": "737498c8f8250b10788710597e5693af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "55265697-10a3-4c79-9936-60ec1cb33ded", "comment": "Malware payload (Mirai)", "value": "5ef23391d205ea6c2242bd439b673adaae6afc7e9787bbdee496c90418219d26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "04594b79-9d61-438b-8d53-218bad8825e8", "value": "T16493C706FF118FB7C86FDD7305AD8A1128CDB89725A5373A7170DAACBA5618708D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "e265e562-a176-4843-86d5-c36846bee4a4", "value": "1536:u//U62k+PpE1UxdYVOPZhesr6Vx55gYOEnOHYN8JBk:uUHXX/axsDY2/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "411ebf96-7b6b-44dd-9d66-6b4a602ddc9f", "value": 90348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "17ffc163-53a4-4c15-a25b-74eb2a9a55cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78fe3825-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "ce1c35a2-8a1d-4482-bbe3-936721628b14", "comment": "Malware payload (Mirai)", "value": "4af12f4cfb52391cca721c3e7800cd60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "7d7e2760-fe73-430a-8d74-52c8ad480be2", "comment": "Malware payload (Mirai)", "value": "4add0ad59d33cbe4cb085a6bf454353d0d321a09c268fbfa9ba9654637975122", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "02dc7403-2342-48a1-bc1f-183344d04685", "value": "T14B93991A7E11DFBFF65D823007B78F31969876D636A18185F26CDA481F7028E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "8a4698ec-3697-4b9c-bb82-1dd45fa0b775", "value": "768:58nfwDCqCEKrU065YAF846NtR4wpyD8I8rJkJoyJkTv2DEe1PIi/:+Y5KrU065YjZSSr+JuTeEeZz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036972, "uuid": "457097f8-1726-4d81-91d9-da2e192c2c5f", "value": 90348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036972, "uuid": "be948efd-ad73-41a7-aefa-b5b76af77247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79001c0d-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "bbc67629-ba64-4afe-a538-15563030b694", "comment": "Malware payload (Mirai)", "value": "dc2b05fd83d68c4172d6c6d95d8d6e31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "658a0a64-4e32-4d0e-ba8b-8986b3032d92", "comment": "Malware payload (Mirai)", "value": "d7b36226abee58382706d931fb885f4a28c463b7692133a6091f849d3412c154", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036973, "uuid": "137e938c-ace5-4c28-ba1a-7de49f5b89d9", "value": "T11E530A56FD52CF03C1C311B6BB9E4A453B166BE8E6EA3202A534BFA137874C70D26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036973, "uuid": "05054e03-8f75-401f-9ddb-5f2e314ce02b", "value": "768:oZlUnRdD5AbrZ4StEv9z2PYaWLw/3KMDu1vrC6nUDv0CdGOJ6YWyn7CMllNmhdVF:JnoyuYaUoaR47dGOJBnbNsdVmDhO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036973, "uuid": "862516e3-131a-4042-afcc-4ca9a55584c1", "value": 62208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036973, "uuid": "4f5872fa-87a1-4a7b-82d1-60afa28cc149", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79015818-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773036973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "5524f601-f483-4dca-9612-c009cb255c0d", "comment": "Malware payload (Mirai)", "value": "80dada63e4328bb5ae46daaa3cdfaac2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "61e3eb68-9d82-4e1a-a7b8-7bcb0ad651a9", "comment": "Malware payload (Mirai)", "value": "e29e65b22c7ac0ea7f907e6bd4059946f17946cc4fbeb375054755e1e66c62a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036973, "uuid": "8f7dfcbf-76ac-4604-a5ec-9ee6c9defeb3", "value": "T12D732A47F952CF02C1C31176BB9E9A493B136BFCE3DE72129930AFA027834D709669", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036973, "uuid": "b419c869-7840-40b2-b957-688fbcea5b7c", "value": "1536:zwn6N6CONSYKMs3izO2mnc3mwZvPrap2yF5XYzoG:/N6COYJ2mnc2wdDaUyFpwoG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773036973, "uuid": "f946d3e9-f6ab-4838-a6ea-90522714a95d", "value": 78404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036973, "uuid": "9827f5bb-d47a-4376-8533-9aac4c2c9a90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd226c2c-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773037087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037087, "uuid": "51fe3903-a9c3-4b0b-9c73-b93275859ebe", "comment": "Malware payload", "value": "8e4b5bb6b90579d4118aeae30e9978ab", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037087, "uuid": "190e4d18-418f-49d4-9ced-5a3153782165", "comment": "Malware payload", "value": "80bf0b7bd2b6e077eeeb60ff0e4b41225bddbe0568952f490c8eb895f194b2cc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037087, "uuid": "dc0ef99c-3a68-4179-a4dc-38bbff29cbdf", "value": "T14DC423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037087, "uuid": "2cec38e8-eba1-40ed-a5af-5c1ded820177", "value": "12288:NeElNtIBB2gX3U54A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezA:NeSIBBfHKm6Jj6ESfUxZ91kmY/9Hek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773037087, "uuid": "860c1d0e-a3ec-4d2b-b935-7d0f2edf7a8f", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037087, "uuid": "1dc37358-0ce8-4ee4-8a0f-2981ac77198d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06728869-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773037210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037210, "uuid": "2d21edd3-3b56-48ba-94aa-34a8b9243f43", "comment": "Malware payload (SmartLoader)", "value": "32f97b5a1891cd88629caab0df0c90dd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037210, "uuid": "6f306b49-7461-4353-b3f0-bd4ce4e39a41", "comment": "Malware payload (SmartLoader)", "value": "59713850f6070b1ca9183949d619152a577f2b8ed9fa34b781a22fc24e18ff7f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037210, "uuid": "ff8a14da-b26d-49f5-b082-787cd96effd3", "value": "T1C2B423F193429E0B23A4DAB457A3DB3375CE7292769D9311CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037210, "uuid": "8268bc4b-06ac-40d3-aaaf-c8233acb0392", "value": "12288:+kmht7DrvdyiaCCH1oHF9nJ/qjuyVgoJrrzTPwkc:+kmHzM7H1ELnKVgoJnnY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773037210, "uuid": "dbdd4895-7669-4091-a4ac-944d5d884dfa", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037210, "uuid": "fb1096c4-7178-4b8d-9e79-0581cb2f139d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773037389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037389, "uuid": "11ab08d2-deca-45e4-a3a9-a21bff1c66f0", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037389, "uuid": "d5b120fd-0e4b-4488-9fcb-598144054f88", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037389, "uuid": "96e3856f-41a0-4261-994c-85ea0c491684", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037389, "uuid": "ae59b6bb-a758-46d0-a508-7463c8ee7d64", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773037389, "uuid": "a0ab1711-fa3e-43ce-8417-f313d742889d", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037389, "uuid": "ecbf1d31-e8cc-4d51-9e0c-e9bef31dc3bd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f6ddcb3-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773037869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037869, "uuid": "ac275cbf-68f2-4eda-a97b-585a8a693707", "comment": "Malware payload", "value": "266090b04059f6df0bf6396241b8c4da", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037869, "uuid": "dd35bd54-10e6-4731-b409-5b80ac81bb09", "comment": "Malware payload", "value": "7a422b0b96afbe2de0bbc53791b457c21b833a2debdf461cec71a91a4bbf12aa", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037869, "uuid": "5abae75a-231b-4a4d-a750-8a7410e05668", "value": "T19FC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037869, "uuid": "e8cc7a0d-d00c-4821-b6d5-64c8fea123bb", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8PtNvC28c5/VTUPkYy8:h+J71vI/G5Yc5/pc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773037869, "uuid": "8abfee52-936b-4809-b343-79fcdeccd37a", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037869, "uuid": "e7242c1c-1a31-47ea-b645-fa97916e0b64", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d66cb221-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773037988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037988, "uuid": "376ecae5-add6-477c-9b30-db5361922faf", "comment": "Malware payload", "value": "c03fad584e16d5ac4d92b7bde9e4ed9c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037988, "uuid": "8eba1e86-bf58-4fdf-9057-d7b7298bd374", "comment": "Malware payload", "value": "c73e959ce6ae664ac2ec1e290e69cb5a69c00a2c10cd245c2d984b7948ac7981", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037988, "uuid": "f0da5189-4e1f-4198-9627-44807449e6a6", "value": "T18AB423CE5A286CAC5BE95E834F5DBFDA2CF8403F862415F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037988, "uuid": "e9b72f92-f8fa-4f71-ae2f-c18cbe63b821", "value": "12288:bGRl4nbDDGIabs/7iiEVwYg2l3/2NHuy+wK82:jTabs/7iiWw0K5x2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773037988, "uuid": "e98da6d7-063c-48a8-957a-aa8e5db723bf", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037988, "uuid": "bc896e19-9bd1-49ee-9340-b4deb7a4a91d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66528df8-1b82-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773038230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038230, "uuid": "9f273774-939d-43c9-8a3f-dc4c683bec02", "comment": "Malware payload", "value": "04cc72a861b03aa27d445eb5e931c9a3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038230, "uuid": "8350427c-054b-4b44-817e-31e8cd519a72", "comment": "Malware payload", "value": "077a19a2bc2a066116d06a91dbc76fcfc88485660aab0d558303d923bb0aeaaa", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773038230, "uuid": "47bdb907-d39a-4698-a9a4-906e1de2be6c", "value": "T1A1C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773038230, "uuid": "056b8741-ff29-4a6c-a244-6e94a079ec4f", "value": "12288:yyBXIs7rM1qcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee58:3ImQ1OEA/f0Za6TCXKBxeq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773038230, "uuid": "7a394eba-cc97-4390-9078-c3bfe860df33", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773038230, "uuid": "34695630-605a-41ab-93ce-2fb9ac03ef8d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70e936e9-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773039965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039965, "uuid": "0703ba85-0eae-43b2-a5dd-b4f595cd78e9", "comment": "Malware payload", "value": "acc8034b9872ba6a9025aa16f2609fa8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039965, "uuid": "5481fefe-efb2-476d-93c0-a6f0904c7543", "comment": "Malware payload", "value": "c712fa2a946d36693a5bed3baeddf48585519ecdb28270bb0395ff18039b7404", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773039965, "uuid": "ef376ece-f1ee-4254-8ded-579304711bbe", "value": "T11FC4231DA0587B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773039965, "uuid": "e4465f1d-907a-4f79-b4d0-eb816d8427e0", "value": "12288:qMU+0xq75aS9iYIp6cP/G2Bku6zXLpHXP427bo:C+J71vI/GzXlftHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773039965, "uuid": "4991764f-587a-43d2-97c2-731b67afcbcc", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773039965, "uuid": "dc49fef9-b8d0-4f28-bae9-553cca3bd20c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b86948fc-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773040085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040085, "uuid": "cc72025c-29df-4c4e-a309-90dfb68ae18b", "comment": "Malware payload", "value": "68c8c88b29474c279146a8778f95058a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040085, "uuid": "c6cd9be8-2450-43cc-b8da-09f176ab9e44", "comment": "Malware payload", "value": "191afefda3b7d155ca73770b6490dc791a6448ec3f1358378f1d91f3abf187ee", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040085, "uuid": "04c8f4f3-d640-4b2e-b8f5-994517681613", "value": "T180B423F5A7606BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040085, "uuid": "9792e21e-9a48-4586-923c-16ca36064df0", "value": "12288:2BRdpQ73iBVYWaCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUV:2HUw2Wr9XgbM0azTHiQIouD5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773040085, "uuid": "a22e52bd-bb52-4735-a53e-02c95b890c51", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040085, "uuid": "0ff008d8-f600-4805-91e0-def3f1e7d815", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a00360a-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1773040866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040866, "uuid": "a0832647-870b-4713-81cf-f25eb065e4ed", "comment": "Malware payload (SmartLoader)", "value": "5a9e0479cb40f385e8aa0236a59d0830", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040866, "uuid": "eea53e22-2c04-4d23-a9c1-9c1d03bbf444", "comment": "Malware payload (SmartLoader)", "value": "2f8c00c2b5c47fc6a3e535839fc387e4257b1f43d965140f230d5ac56df2737a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040866, "uuid": "550cf3a7-5381-4eba-b4b5-795b56f9e16d", "value": "T17CA42397E39997EC88C47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A39E075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040866, "uuid": "023dcd34-c510-4914-98e2-eeab5ccca8c8", "value": "12288:msS5lyFd6N+6sVXkvgSe5yHqr++rVOje+yH5a:msgx06sSvPKy+6eTH5a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773040866, "uuid": "cd014562-9bf0-4dd0-98cd-de35814f0e42", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040866, "uuid": "f46e7783-ae67-43ef-8f35-8fc642cc5aaf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a111b97-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773040867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040867, "uuid": "3c15ef67-1807-4216-937e-8987c01de536", "comment": "Malware payload", "value": "b46ae57f547b562b0d440ef3f0c7e7eb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040867, "uuid": "d0bdcb59-aea8-4ab6-a4ea-1db03f937687", "comment": "Malware payload", "value": "c5d66b5de69da39cb2b8ef16d6a05fd1f4f547256fdf3c55d76ee453658f72aa", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040867, "uuid": "d0272824-7083-43ce-821f-ee81117d1a1f", "value": "T19AF0C89223C8EB6505E314B471305584B0548C06B0126C8A7773C51DE3C02CC831C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040867, "uuid": "b6ce1b0d-98e3-4abc-b954-740ebfce01d9", "value": "12:QAG8l9k3W6NbvaISHcMGJfQh1xaqpzP/K922oouPaNEzL1Ban:QAZam608MGKh1xaeLKI2oNPB3Ly", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773040867, "uuid": "604ea20d-d713-44dd-954e-7b4348cdca33", "value": 640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040867, "uuid": "5a00a1fc-f882-49a4-a958-18ddf95726d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90ecaca3-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773040878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040878, "uuid": "832c1bdd-a457-4427-9016-08e4040c54c5", "comment": "Malware payload", "value": "a3da27b450f47e51556344fcae175042", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040878, "uuid": "b2d28433-96d1-4ac8-9252-d2144fd843f8", "comment": "Malware payload", "value": "0f3e96416ee09c32f4f9bad22bf29b646bf062c4191bd753dd8737a942cb4d68", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040878, "uuid": "c314b962-5f9f-4b16-a95c-be4554df0eef", "value": "T18076332B58FCF8693ED245515CB1164F6A884B6F9BF371E2731ADCB081BE30A24B90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040878, "uuid": "b2a3f6e7-b911-479d-b5bb-1ec00c6842c3", "value": "196608:qVfgaiuLVOvzSrio4/V040nCUBGE2bd+m7mJgeh:qFQvzSry/V0jx2Em7nk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773040878, "uuid": "709475f2-2f82-4969-b0bd-fbdaa1d85d8d", "value": 7282720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040878, "uuid": "fc562622-e677-42be-8c30-289e55e8c6d9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d37bed57-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773040990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040990, "uuid": "8f121852-5730-48b4-9b16-bd66e8232df5", "comment": "Malware payload", "value": "79783cbc885d595f7f0cb0b0c67f73a7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040990, "uuid": "818c50cd-b880-44b8-96e6-2711dacd8707", "comment": "Malware payload", "value": "f18b40135606ee6b5817cb1f871513726d601a422dd670d7951a2b767d83ee08", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040990, "uuid": "eeb17a24-9629-4896-9465-9e5ad6df2045", "value": "T1B1A423A35293A2D7ABA19F74E40D93D1F2CFCB0D3D9AD2F423B6F904F66518944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040990, "uuid": "895ea1ef-2015-422f-bd4b-fa4d6122e407", "value": "12288:31TGoqqMj4uEU591RIfMiZ5d6KfLGsjukmtrYF0:31TGoOjr9EfMiZGNtcF0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773040990, "uuid": "3a4f17f7-4d5f-425f-a971-ac1f4f96bcf4", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040990, "uuid": "4f119e06-1e0c-4d20-95d1-c163131080b6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c5fd89e-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041166, "uuid": "0dadb9cb-d6da-4bcc-b57c-13230385e2b7", "comment": "Malware payload", "value": "c1fa487e7dd711726ff1dc7024924e9f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041166, "uuid": "de5b7cba-0ae4-4c78-b1a1-85a2f3a01c61", "comment": "Malware payload", "value": "102c6046e2f9398483bd8b7e0cf43c0486464c1c15e174c88c905c75d9b1163c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041166, "uuid": "b6b08ca7-b194-404f-8c1f-ce1907d82493", "value": "T187C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456267BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041166, "uuid": "3e7337f5-f5b6-4f51-b231-810913082afe", "value": "12288:IA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW/SFyorOIic/7MP2:Tm6Jj6ESfUxZ91kmY/99z8aFXicTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041166, "uuid": "9f634f96-3dcc-4bf3-a148-00391b7591d8", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041166, "uuid": "4fbf4bde-2cb9-4264-8a94-3a8544c580f5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ffdcb07-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041226, "uuid": "0067cbeb-74e2-4990-a480-cda460b04bbe", "comment": "Malware payload", "value": "6c615b42c0103304cce6f9211d3e7dd8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041226, "uuid": "5b278abb-e941-4062-a5b7-03a0514fd279", "comment": "Malware payload", "value": "a010058129ac6d10c69d3d423727cb9df5d4ab275555d586ae5980f2e6c549bc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041226, "uuid": "c4623b9e-b328-450a-bbcd-7936e6d67815", "value": "T102C4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A08407399B5BE5B65CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041226, "uuid": "8880da92-05b7-4a78-92ce-35edd59d0343", "value": "12288:0MU+0xq75aS9iYIp6cP/G2Bku6zXLaHXP427b9:Q+J71vI/GzXWftH9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041226, "uuid": "7e7a7d60-4c93-481c-a4c1-04c11451fa58", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041226, "uuid": "ddfbf062-50e6-4801-8f1a-5cf13795cc81", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8435eaa0-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041286, "uuid": "cb52c93a-3aeb-4b8c-98b9-ae761e22a1fb", "comment": "Malware payload", "value": "9ccf562773ed9472be8c3a515bfbeb4c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041286, "uuid": "efc8b563-d1c5-433b-8a72-aecfab2be430", "comment": "Malware payload", "value": "31e311d881ecaef0c90c6112f86317b24a77e4058345e913e02913c39b3161e2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041286, "uuid": "21085439-b4fc-475b-81e3-c8941aae73d7", "value": "T136B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041286, "uuid": "abfcb3f4-4ef0-462c-8035-71a48677f398", "value": "12288:R7JZAaFpeyqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wy:lLpeYA/f0Za6TCXKBxmy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041286, "uuid": "19fea863-b286-437c-a9df-f9b05e1b30ec", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041286, "uuid": "93314109-f54c-4a07-be49-0fd59c77dd39", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd4d382e-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041409, "uuid": "45ad2344-e807-4f96-9078-5874b3c4e3dc", "comment": "Malware payload", "value": "3456c50705c512e19bcb4e3ba90a222c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041409, "uuid": "65b39268-6768-49c4-8312-07f89fa37155", "comment": "Malware payload", "value": "0d999fdf34ca2adefe470a97cbba7c134ea01499b2942a946b60cb7142ebecbd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041409, "uuid": "16cb5e2f-199a-429d-9b05-cb2eddf50ba6", "value": "T197C4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041409, "uuid": "ea2fd219-4389-4c3a-b05b-46307d166762", "value": "12288:0MU+0xq75aS9iYIp6cP/G2Bku6zXLuHXP427bZ:Q+J71vI/GzXyftHZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041409, "uuid": "952e84a1-963d-47ba-a917-5a226d16e34d", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041409, "uuid": "7dd68a74-b734-4884-8f4b-bef2f4f9ec80", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f09787a4-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041468, "uuid": "76e41c64-02f7-42d0-8247-361d3a8526c7", "comment": "Malware payload", "value": "d3789fbfdb01808c9ba1968037edc906", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041468, "uuid": "d2280ccd-169a-456a-a120-1359ba413b2a", "comment": "Malware payload", "value": "f1340c33285e1998378ea8d571bb6bb1e301825e491009aea650d3bcca2b6cff", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041468, "uuid": "9bcad905-324f-415c-b658-703cd0b6ccf9", "value": "T1D4C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041468, "uuid": "b88e5ace-9e3a-4795-8a09-91f88849b329", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byEH9I1P0QKw6FEO:j+QqldA/TSO713u7xnEH9IaQKHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041468, "uuid": "157fe051-8a61-431c-ae6a-394c9755d5ff", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041468, "uuid": "628ba6a5-aa2e-4abd-b94a-14884e3a5476", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "175bca91-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041533, "uuid": "8a35df3a-acda-4d74-b91a-4fda7ecff166", "comment": "Malware payload", "value": "b0c25dc01263354cc640d8003e3ef2bb", "object_relation": "md5", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041533, "uuid": "9dc193a0-55d3-4d72-94c7-84b963c3cec1", "comment": "Malware payload", "value": "e0697a81049e130aabee914f3e2b9cc11125cada4ffd6502d1b47e3b44bc6da7", "object_relation": "sha256", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041533, "uuid": "e2ba1be3-d425-4317-84ac-e81bad0d7f89", "value": "T199C38C180C9F4CA0C3D6BC5EA61714CBDB76940B190BED55337CEABC6F4A42A90EE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041533, "uuid": "08633098-df1b-4bc1-936b-1335bfc55f85", "value": "768:YObNTnZnJhkjIcZxCQdad2MQdUGvzaET5tY7fIojQPiXqKhrf5eEMz3JEWMebdZi:9LnQo4bOET5tY7fIoM6NeNH4P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041533, "uuid": "a07bc995-e30f-4cdb-b053-2be3b96c769e", "value": 120668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041533, "uuid": "4ba02df0-d51d-49b6-a486-23c8d4ec8dcd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38746ca4-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041589, "uuid": "7106b6a9-8dc4-4921-bc92-7aaa14a34007", "comment": "Malware payload", "value": "7777c1a078f911788df499f2eb3bc83e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041589, "uuid": "e8707520-c86e-40a5-8a42-f3a5cf82eb5d", "comment": "Malware payload", "value": "24d0d06ee61b5737a9617381c0e12a3036e58c958d9b6b030fa59788d2471095", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041589, "uuid": "37d8188a-626e-4a11-a07b-0b3eb912fb94", "value": "T177C42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADE7ED06DE96A173C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041589, "uuid": "91933842-b13a-4eb5-87e4-16b053649e6c", "value": "12288:r6wlOMWROC/FTeHo22Qm7NzofOr68mCeA924EwCA:T4MQOC/gHozN7NzomW8AA9T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041589, "uuid": "b0f2f015-0e3b-42a7-9bc4-7a50ee5ae16b", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041589, "uuid": "3380b4bd-2f25-4034-bfb0-4a61c3ba9bd3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c0df221-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041648, "uuid": "bf1cd0f7-1086-4326-867f-4ca915f98b52", "comment": "Malware payload", "value": "ac84f3c0d6c059266aab142e070cf3a0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041648, "uuid": "4741c135-a9a4-4822-b41e-7a8227a7c17a", "comment": "Malware payload", "value": "762dae463fb2190b0b7864ec7540735149857de535921f2359b88671189cc6c0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041648, "uuid": "847a0c72-ba28-46b2-b3f3-af2604513ba4", "value": "T187C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041648, "uuid": "3b12190a-a3a2-4b7a-8991-99c5bf32b95c", "value": "12288:7yBXIs7rM1FcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee58:OImQ1REA/f0Za6TCXKBxeK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041648, "uuid": "dc0270ec-2fab-47ba-892d-ee6eabea340a", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041648, "uuid": "ad22ea20-3bbb-40aa-b41f-52a5984d170e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95dac79e-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041745, "uuid": "abb1c963-f371-4fd1-a3a5-074b24c2b17a", "comment": "Malware payload", "value": "de77b2a10d6e2a75384c880d56ca9194", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041745, "uuid": "c76f26c6-918d-4e50-9bed-eff148f5650d", "comment": "Malware payload", "value": "0b6b1750fdd0a30e1f93aea37296e4e79328f1bc39cb01d6a6a39b0d48370be0", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041745, "uuid": "b3b6431e-0a17-4363-b7dc-d81251ae3a42", "value": "T124B304455C6B8476C7FEE8A9828B5C5BFBC1620F172CC4107A0F69602F22DA5D4BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041745, "uuid": "61ac48c0-1c56-49c0-bc53-b8c3e60a56d5", "value": "768:RFpWj+liWfJ2rKNxfL6D+IGDKC/Y1VWxwrj+yKqSGXysMdZkZLaQvxULyFIrc1k/:c+/fd2OIl6yaGXysMdZ4ZBlicQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041745, "uuid": "3079b67c-361a-4567-99d2-057cac6fd65f", "value": 114503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041745, "uuid": "022713a4-e9a4-4981-89b4-22c3e53599b7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a367af6d-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041768, "uuid": "f537b380-9358-47df-b606-0a2595a2b5bd", "comment": "Malware payload", "value": "fcebd02ab8f4b5ca1db2734070cf07b4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041768, "uuid": "b986684d-215f-424a-bd0c-7d8096c9aeed", "comment": "Malware payload", "value": "64c8ed17089ecc967cb25c4f9df26e87a84f8b9ecaedd48a45edf33bbc655c72", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041768, "uuid": "40243b36-0cf8-4ee5-a92a-867b9f48f8bb", "value": "T1FAC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE52A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041768, "uuid": "a2105f48-19d6-4a16-b466-e52c5f54505c", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68m1eA924EwCT:b4MQOC/gHozN7NzomW8zA9E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041768, "uuid": "b28a7775-cdc1-4e93-bff2-0f2ebfd9dedb", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041768, "uuid": "c4cae153-4bc2-4925-99f0-950bf3249e72", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8f146b-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773041946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041946, "uuid": "5bffab5e-4c3f-4dfe-a4bf-5567c9437001", "comment": "Malware payload", "value": "c4ac801c197703d757faf571a23fef0b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041946, "uuid": "1cd5543c-e11e-4682-9d53-85c58bf203a1", "comment": "Malware payload", "value": "6ef090d7ef3968db86a3d65a63afe8f088144297065b387f276972e67b09c404", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041946, "uuid": "731e791d-f764-4b67-87f3-680a207070f5", "value": "T198C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041946, "uuid": "14b8462a-ef5b-4420-9774-987dfe2b933d", "value": "12288:z+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bypH9I1P0QKw6FEx:z+QqldA/TSO713u7xnpH9IaQKH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773041946, "uuid": "43a29471-6bee-41c2-9e93-008966ff47a2", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041946, "uuid": "8157c4e0-408a-4990-98cd-51a2e1d919f9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32d9e158-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773042009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042009, "uuid": "0774a44a-579c-45d9-93ee-2af6eb9cbe69", "comment": "Malware payload", "value": "3877e33be216fe8876b335c808fd8b5f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042009, "uuid": "ccda7a9f-0c5b-46db-a8d1-a1c26ef24527", "comment": "Malware payload", "value": "851bd9064ed06909c07ccd478734343f3cacc33038b903db73e3f6ec1f704cd3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042009, "uuid": "17e8817b-8373-405f-b33d-0a1d20d7562a", "value": "T1DFC42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042009, "uuid": "0afbef8b-4bc8-4715-80b4-e8fc036aff3f", "value": "12288:UeCEhtC9qO3g/ALyYG0ZaDajTCXMO8xzDOeQaki:btUA/f0Za6TCXKBxl5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773042009, "uuid": "b194c43d-811c-4ec0-bb40-b78ac6ac8c34", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042009, "uuid": "6c64868f-22fd-4440-905d-6942815fccc3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "550d8a9c-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1773042066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042066, "uuid": "4fbba0c6-a261-466d-8fb5-94e60b874fbb", "comment": "Malware payload (DarkTortilla)", "value": "2397fa67905a6e514afd4bfc2bd98c23", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042066, "uuid": "d7a5d1f1-6817-4f0a-bbd2-e6fc006ad1d1", "comment": "Malware payload (DarkTortilla)", "value": "377828a1ca571b39bac738e830f756cca4d668e7b98fba5d6545abf17af4ae96", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042066, "uuid": "05a76e1f-6278-4c83-bf10-a8e048971a33", "value": "T17465F1062EC30E98D7690F78C2A705A827F0D50B9272D7AF3FEC42F59E62B55DD051", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042066, "uuid": "904234ac-f705-4c9c-aa32-cf7c86ff5eb5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042066, "uuid": "7753ed11-b162-4322-a21c-103dbc348358", "value": "24576:N/0jB/gio0KYlHCnRveYepqMKDmfC4KOSSn2i6AIrcqHV1c7:N/0taY0RveYkqM3fC41p2Jr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773042066, "uuid": "75cde6fa-58ee-44bd-8a59-1bdd0ad92dda", "value": 1422336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042066, "uuid": "b484e5ed-65ff-475b-bd15-9d4b14ce50c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb8e3248-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773042668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042668, "uuid": "1c3c431a-33e5-47b1-bf3c-728fa57dd4fb", "comment": "Malware payload", "value": "4154af351dabe133e0eb03fc05490228", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042668, "uuid": "702af6a2-5b4c-49a4-9cd3-eef4cc75590c", "comment": "Malware payload", "value": "fd303a8427ae9b04f452920fad988e79a06b84a6782a676d6e707d90166e3ec9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042668, "uuid": "6650f17e-5e9a-4d24-9823-83a5de7c548d", "value": "T162953B62FF22B9C6675B060AE1C1FACC19992316DADD0ECF946CE9890953B31FD1DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042668, "uuid": "e0076588-a01d-47ef-9792-813f797bea7d", "value": "24576:P+5RuFaiFxFlGLcc39UqkVAgURdgXqSJIVNw5Xt859vLaNWBqPTNnEZzAp+:Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773042668, "uuid": "53f7a093-6f5b-42e4-9ded-b5e632d5ce3b", "value": 2006096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042668, "uuid": "a33529fa-5bd4-4a97-8ee9-fa8cb33cbe53", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbef6edc-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773042668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042668, "uuid": "c3d87010-bfd6-441d-ab07-094eba47e5be", "comment": "Malware payload", "value": "78e31189103eac96adbf908cb11cf1a0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042668, "uuid": "076b3b5f-f2d2-48fd-9a21-9e7503a84643", "comment": "Malware payload", "value": "070d912df8283da477e3e4365c5f3ad419501469976f4753ddb829d5279e3309", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042668, "uuid": "34c552f9-d609-45ea-80df-e3c4153e1efa", "value": "T1BAC4D9B472047880D46AA7729D74AFA8E13D11B59BCE3ECC1094FAD02FB37597A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042668, "uuid": "9b609224-1f10-4017-be00-b59989502519", "value": "6144:LnIEG+2egAvfnJvT6on+lXUZuwpdeAW2eBbjwPeb76iLNZFGij:wYnRB+R6PWWiPj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773042668, "uuid": "40aa657f-9eb9-410b-a0b3-c623d1781286", "value": 593806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042668, "uuid": "b8e3049c-6ab7-4e36-90d6-e3bc09b3f48d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5229c5a-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773042737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042737, "uuid": "adc61c15-f3f9-466a-be18-813cf94312cc", "comment": "Malware payload", "value": "87d978faa24e91aec25fefc1e79ca04b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042737, "uuid": "614fcd78-9de6-4ace-892c-d381c9cfba62", "comment": "Malware payload", "value": "afc130015d823922cd2221ddf52f8ae1791d9bf0cdda7f7c6f369854d9f12a14", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042737, "uuid": "01933635-ca27-453f-b771-b20c7e52cdf9", "value": "T16CA52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042737, "uuid": "ffcd852d-9a3f-45b4-a41d-f97499c48453", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042737, "uuid": "eaf50100-4b90-4e60-a4c4-ede02d313a24", "value": "49152:ABRVTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:anTFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773042737, "uuid": "881a674f-7d01-4ba9-8d3b-c5382e8fb643", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042737, "uuid": "4bfd3ba9-cfff-4a6f-8362-47e6f76d27e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01300bf3-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CountLoader)", "timestamp": 1773043247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043247, "uuid": "344a3c64-2eea-4678-ba2c-a2440d816f3a", "comment": "Malware payload (CountLoader)", "value": "53bee385626cea6823dbbf48eb04c183", "object_relation": "md5", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043247, "uuid": "a38ea234-a4d0-45e4-8fb7-0a34e5a6f58a", "comment": "Malware payload (CountLoader)", "value": "0d24a35bc17cf1c3f374c20acd4a72a588d38456b816ac2a8f8fb669df1f4cbe", "object_relation": "sha256", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043247, "uuid": "4cb441d9-6568-4521-94eb-12cb7bf14621", "value": "T15AC3CA1D08FF219142466E11E6EB5877D7A089538B14C3D1376CB6F1AFACEB2D0FA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043247, "uuid": "66937b27-121f-47b4-8248-a20e07a34427", "value": "768:XSSjwv7F6JtyU7UzU2tUMUaUQUuU1tUNUZMUZHUZKUZqUZNUZXUZAUdmeQUdme60:8kh3w95M+wkcZhT28TB2pNf+dxAwJs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773043247, "uuid": "385e965f-1ba6-4605-b373-ffc2d5ea6930", "value": 123306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043247, "uuid": "c7e62f2d-997e-489d-a943-e85bafbbc5e5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd0e3fd1-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1773043583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043583, "uuid": "19561408-f692-49ee-a09c-c479b584a6f3", "comment": "Malware payload (DarkTortilla)", "value": "708cccdc38a2239e17f60349361ece20", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043583, "uuid": "cad606d2-51a0-4773-aeb1-d7b797b458f0", "comment": "Malware payload (DarkTortilla)", "value": "ec6cff466bf67f3eed34ab955f4fb51c26727247c6908cc535c225f741a843c7", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043583, "uuid": "c5ae20e0-f12f-4a93-8367-ebacf0340637", "value": "T1E905D0016E820E98D7290BBCC0A306A427F1E8479277D79F3FEC51F969A3FA8DD095", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043583, "uuid": "6eddaaa3-5be7-478e-84d3-cb57458a1df3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043583, "uuid": "f371c02e-6c51-4e0b-9a5d-dcb80d5a2580", "value": "12288:Lvm+Skk8v+ERym/oI6JBW8P0KbklluD7edk7+N4KJHZ81c:LbB/gio0KYlAem+iKJu1c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773043583, "uuid": "9dfe8ff9-3bfc-4d35-8b75-7037116ba794", "value": 839680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043583, "uuid": "7cf1c2c3-aea5-405d-b6f5-24def45167ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99bc8534-1b8f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773043899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043899, "uuid": "ba7d736a-e1fe-441b-ba83-d85a792ea87d", "comment": "Malware payload", "value": "80d911ca183c1ba574537de7eae5d52f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043899, "uuid": "ba83512d-0d60-4ad7-981a-067ffab13677", "comment": "Malware payload", "value": "6c2a517bf2ae7fd8b62c8068e386b709d3e62035305f1cddc679a08272e15e61", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043899, "uuid": "8133c677-8f13-47e5-abe6-ea67b9f2dbec", "value": "T10334CE80DDD937C676AB5D56F7FB7E22176A02836289BC96132F5040930ACD782FAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043899, "uuid": "2c452b68-1092-4ecc-bd48-2dd69425b7d9", "value": "3072:w4rsT9ciYPXQ5jpH3TMM1wUwLBg0+4lizqf57xOxoR1MQp2vZmPK3kBc5wmllPNd:dG6PXQ5NjgvLBvV1EoYY2hZdF1d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773043899, "uuid": "0fe89f1b-c0ea-4fb9-a923-6c317edf7551", "value": 239687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043899, "uuid": "fff93c39-d50a-4ec6-bb80-a396601290d1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f494f89d-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773044911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044911, "uuid": "bb976813-b749-42c4-b960-3e007ef7b3a2", "comment": "Malware payload", "value": "9bf546c003d21508904f9c0454b3cf77", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044911, "uuid": "e436d5f4-0240-4688-87b1-0013df08ae5f", "comment": "Malware payload", "value": "ade6fb843636224bf40de940e52e81e3f883c94d47b60ae3664d3dc1652d4701", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044911, "uuid": "d7b3f02a-279c-4a16-80c3-8106919abdae", "value": "T1698309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044911, "uuid": "09950f46-797c-412a-8e1c-eb164d655631", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn8WalVN/:XEKltp9txAX/yr2pb8WEVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773044911, "uuid": "1a97e340-25e9-426b-99ee-4774df8eaa23", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044911, "uuid": "02ac2191-c3c6-4a89-ad03-67da43f1df29", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e155425-ed79-11f0-8990-82aee05be84a", "comment": "Malware payload (BRAT)", "timestamp": 1773045252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045252, "uuid": "1bd42037-0c26-40ca-a5cb-60b3aa79d3ae", "comment": "Malware payload (BRAT)", "value": "423cf5ddbe13df64594385b8fd519cc7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045252, "uuid": "3123b425-c31c-4505-a8ee-92f342e876b0", "comment": "Malware payload (BRAT)", "value": "165c77e0cb3fc6551babc2de99e0c5182fb86e20ac3354da7ae980b580721049", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045252, "uuid": "2abf84cf-93ed-4748-8e64-460d8c619504", "value": "T157867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045252, "uuid": "4889e07a-1699-48cb-9b1c-51a529515bdc", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045252, "uuid": "70081441-8f03-4c83-a120-e650930df7a2", "value": "98304:G3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:GjigJMg3E1qrQFM/U8gsHCYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773045252, "uuid": "2dc81510-2d0f-48da-94e1-9e6f9c5b199e", "value": 8346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045252, "uuid": "17c48d25-89d7-4d6d-a3cb-8e8458345e9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc85c4c1-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1773045341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045341, "uuid": "21543c80-f8e8-4e05-9cae-1a235fbd5a36", "comment": "Malware payload (CoinMiner)", "value": "9f3069e77d062da63b7ba5c1f35e9937", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045341, "uuid": "835e9790-3583-4b6b-a472-689bee51214a", "comment": "Malware payload (CoinMiner)", "value": "ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822e", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045341, "uuid": "eb3c7a0a-b978-47dd-859f-2d86a28b05a4", "value": "BD563345F4809837F139153625F884B2B07DBC7297244BDBA39E2AA56E317D83339A4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045341, "uuid": "9a229342-10a4-4ccf-8417-dd967b6386ad", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045341, "uuid": "b71d0c47-96f6-4c55-a34e-17dbd2958138", "value": "98304:RLJSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:LBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773045341, "uuid": "0f510828-7144-432a-a05c-62d3a737b64b", "value": 6227160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74f779aa-1b94-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773045985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045985, "uuid": "27cadc35-7106-4a50-8347-f09034604da4", "comment": "Malware payload", "value": "4a5195d3540e1b57035880edb590fef5", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045985, "uuid": "c13a4840-f94a-40ab-b8e1-0afe53778878", "comment": "Malware payload", "value": "b0ab864487436501a079f9c4ee44e73436250145ae195357946f8d65717f9241", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045985, "uuid": "65fe3eb9-6553-4619-a998-855d74006919", "value": "T15EB63322A842D073F097233930D98BF9053B33360F65A2D77A929B7A1E5379327195", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045985, "uuid": "bea79a8a-1c49-4988-b063-2830cc9bd848", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045985, "uuid": "3e91c9b6-0e45-408b-9028-4d132d0441ce", "value": "196608:bTwQ1Kj7VKPWx9ufVcHeHaGaMwntW8zw/TlTIKLejCKliCiB4EvRDUcBmMPKgH:3NK1locvXM6Vz8ujr7xWDC4Ki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773045985, "uuid": "7a39d2dc-ff5d-4b29-baef-16ea9f51a2c2", "value": 11381760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045985, "uuid": "a0132222-c43b-4c54-a36b-507f56f63397", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e6acfcb-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773046269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046269, "uuid": "cd51a6aa-8c3a-4299-a775-8c11d385f2e7", "comment": "Malware payload", "value": "cb36b951c4e5ec883e97fbcfbc13a5d6", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046269, "uuid": "bb2508bb-c24b-4349-aa27-ffb0a22922f5", "comment": "Malware payload", "value": "a885302ca2ed0b32332d2369b4d787f14d7120c2ca88d62f6ed90dccc222dc75", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046269, "uuid": "7d76f6d5-e1e8-4b2b-a558-324937d18d9b", "value": "T104C633CA01BED24EE50C13856CBE3EDED8B933864D90DD45758E3AE844ECAD5DE43A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046269, "uuid": "97e96e54-4367-4067-be03-831c44b1889e", "value": "196608:3AtiwP5wCoUL70rhWK4GSorFe3DOCTx1Q4PCNRmrAwezzKpOhKoRdv:CnYrN9tyLjQ4qNRvwen5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773046269, "uuid": "0d29aeb0-6e46-40c8-a2a5-07e5a5e036fd", "value": 12341510, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046269, "uuid": "5dd5888b-474a-40fc-a46c-ffc6ae20e8db", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "184f6ada-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773046426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046426, "uuid": "9075ce07-4db2-472b-9ead-46b8bf14a809", "comment": "Malware payload", "value": "123dfe79846e600a8336cd14fe647d5c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046426, "uuid": "42b5f050-29b6-45eb-b972-0039746777cb", "comment": "Malware payload", "value": "e967cff2e9a75e8f80fb4938ede971f9accee357cf9a761e9b34cdf5e9285e81", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046426, "uuid": "2cdce6c9-f841-4cfa-a89b-5ca7b17cd450", "value": "9A73121613AD296152714AF1E7FE7F88E50D2A688FF1AC247C227C68ED333AE1CD4519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046426, "uuid": "39ab233e-94a2-4186-bf6f-d102de256011", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J5:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773046426, "uuid": "2b911d4f-7805-4aaf-8523-3424328ed73c", "value": 75296, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58eb693d-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773046797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046797, "uuid": "c6806969-b8fd-49f7-b896-074bd857985f", "comment": "Malware payload", "value": "469dbb672894be2368266532b0eb732c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046797, "uuid": "68e0d54b-fc5e-41e6-a323-23906dbb627c", "comment": "Malware payload", "value": "022a50b0d7e6958b25c9f43c83f7a466669479b25d598024dda26cf35a132415", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046797, "uuid": "be18fad0-b994-4354-9536-cca27596e30c", "value": "T198A2E104568B2E90704F75AC2FD772987519DEA4EA7832BAE603C8B0BF82855066FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046797, "uuid": "16f10640-d169-434f-b450-4cd8952077f8", "value": "384:IoEr9luPgF+FQl0QO6Ea1zhFFI70vkBNu6e3Jv0fWXrHndjHFOgynHHWCUmdJyZ2:Izr+4F+5Qbr46sNZe310fUrHndjggIHL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773046797, "uuid": "992ba5bf-286a-4ddd-b9df-5ab415468d0d", "value": 22784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046797, "uuid": "fc3be534-c45e-4d17-ad4e-77cda944c75e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab7bd2b-1b97-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773047176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047176, "uuid": "df72321b-8f9c-48f8-bf9f-389bb79d0116", "comment": "Malware payload", "value": "6f3f5e7a775ca79b672bd163a7acf5c1", "object_relation": "md5", "Tag": [ { "name": "pw-valorant_git", "colour": "#2ea43e", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047176, "uuid": "ccf07423-e33d-4393-8d7a-72f758e785a7", "comment": "Malware payload", "value": "eb68f96dd818969c4549e2913089dcb2293fa5a36ae7f07c55838942472a95cf", "object_relation": "sha256", "Tag": [ { "name": "pw-valorant_git", "colour": "#2ea43e", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773047176, "uuid": "39b59c0c-7915-4ca6-8173-297c926dded4", "value": "T18CB733472D3313D8F59E73B8E42618D800325F79907E84319B6D0A2576BFF6AE289D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773047176, "uuid": "de523128-972a-48fb-a36e-fcf80b2d6b39", "value": "786432:4ma1TlG/nprzX3roLi1qk+eEkeawI9rdZ0oalhIfzb0jjKl6Hy16R9YdkN9Mjq:GNlknJzULiisrbG/C31w9YKp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773047176, "uuid": "700e2687-2fa5-4c8e-9374-fd51b7b75757", "value": 48887342, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773047176, "uuid": "55b2f79f-90df-4e0b-bf20-78d9d9af4540", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "939629cc-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773048614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048614, "uuid": "068e7ece-8ff5-4dbc-994e-628db60daed0", "comment": "Malware payload", "value": "7775d105c3d9e0439c8ae53d2744ac6a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048614, "uuid": "5e3c3893-096c-4dbd-bfe7-2590fa19b75d", "comment": "Malware payload", "value": "b0bcf4811096dde612407729c7efebe0ec5db3acbe6dd4ba5bac6ff86c55a7fa", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048614, "uuid": "2b7dd5d8-3091-4362-85f6-4984dfe5b48e", "value": "T13612AFF018A5B9F86C212952039FA4D17F95B159DD472CC75951B30C9D6BCB08D4C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048614, "uuid": "e2df8e7f-fc51-49a0-8ec1-d6a0f69a5c28", "value": "192:LFt6Ejo1pgKScBuQwFk0bcOTVqvZoeMyPClBF+X7tIudffrr6G:LFnfKwW0rBqO7Vfmdnr2G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773048614, "uuid": "fc1281dd-edbe-4559-b0dc-62d3b989017c", "value": 9472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048614, "uuid": "aa16f832-dee4-41f5-982d-1d4951cdb8e5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b5e71e9-1b9b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1773048814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048814, "uuid": "d3482b43-c684-4243-9c63-b8b83f23906b", "comment": "Malware payload (CoinMiner)", "value": "88ba93cc81c2f2c175fc7b521e94fc00", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CVE-2026-1731", "colour": "#6dbe0d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048814, "uuid": "fb4b23a9-73c6-4781-99d2-d89dc582c8e4", "comment": "Malware payload (CoinMiner)", "value": "7cde0ffc28a6a25867655b2616cfc6cb01b08e9ba5ba043b26446b5eb8e248a0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CVE-2026-1731", "colour": "#6dbe0d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048814, "uuid": "56d5c4e1-8534-43f1-816b-42daeb944241", "value": "T115E533F8636BFAF7DF6D0B1594F507625686A1A361AFEF2C9EC870174FB811406D20", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048814, "uuid": "9686591c-2526-4090-8ade-11b8a79fff30", "value": "49152:GqZSbqOjnVspdnMQ3mscf04pJgXD3iCGE7se7/xjceUGdbF4URK29PtVeL9Raoym:GYSbZhspdnMQjcc48XfGg/xjcFGJ4URU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773048814, "uuid": "0ead5605-015f-4b6b-95b9-a485fab13f46", "value": 3053824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048814, "uuid": "ef350a9d-e9d0-41e9-aac5-c6c059a10f46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3c8e126-1bb4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773059834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059834, "uuid": "745a4de2-52d7-4431-bdce-8287705de8c9", "comment": "Malware payload", "value": "4d171dad2faddf0903613928324bdc79", "object_relation": "md5", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059834, "uuid": "edfbc0aa-4661-4fd5-a582-defd0ef1f610", "comment": "Malware payload", "value": "984f61e8f0adf7210a74d50fa6ff6e5f16b4dfc66bfc796a51f3891f860deff7", "object_relation": "sha256", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059834, "uuid": "d0506474-7d54-49ed-81c4-1e946ed6ae78", "value": "T143A537E684B1FF13B7B61D0863741E591018263B0FDB011AB4BED7C676839A934AF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059834, "uuid": "9200d6b4-2f94-4809-950e-a16e1bd7c0a0", "value": "49152:vxicL40abm/bWgTYOfNbSAr44CM9i/oq5VdU6Igq:pi30aMWIYMmAE4CM9iVdUL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773059834, "uuid": "eb99aa33-4a6b-4358-b991-f39fea401912", "value": 2258452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059834, "uuid": "1eb92bba-e575-450b-8916-3740f2305daf", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5582cde-17ab-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773059837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059837, "uuid": "3142ebbd-7e7a-4798-866d-454363751b62", "comment": "Malware payload", "value": "ce11fe3bd4315246a6245ad326d7f816", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059837, "uuid": "99f28b3b-3196-49f1-aa45-9403cc5240f2", "comment": "Malware payload", "value": "a945e648556cb1ef96710cd1682c9bb989dcfa4809dd7f84f31413aeb87f144a", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059837, "uuid": "761bee73-852c-48b7-b0c6-ba819a7f4c16", "value": "T19807E66B24DF59AAC3EF564149B22F1871B47712AC170A3BA1BE75C79B713B80803F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059837, "uuid": "40f78f9f-e73c-455c-9bea-311256ea9086", "value": "49152:8UixbItdTrJoFVPMvXGw9Z4YrArVd1fCo1beULmi+VrKct/7PSBPy25NR6M0/fcg:7iBI/JoFdMPGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773059837, "uuid": "02622db2-30b3-4ecc-b7e6-34ebfc6f3657", "value": 16837457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059837, "uuid": "2140356e-e50d-4d5e-a0e3-5e0e5cbf6364", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e8de45d-1bb7-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773061087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061087, "uuid": "68908eec-1b61-4f68-a121-0e120edd35e5", "comment": "Malware payload", "value": "69521c0e54ddac03172e5749dd31630c", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061087, "uuid": "d43d808d-8f04-451a-97db-de10e6cc3088", "comment": "Malware payload", "value": "a62880cf0cf429ba0133e2f636ca24d8e4f3c3c19038619114edc6bbdf2f7c93", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773061087, "uuid": "46e6d733-a720-41aa-9b25-5369fa33a522", "value": "T118D4236D5DC0767CC0B2109BF7161CBAC09C7AC9DAB364698027566BC276F2EB1DC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773061087, "uuid": "2b197259-cc71-42e0-aac0-7f6374e77d24", "value": "12288:9dULHmjnGeqA6wXcT8irkNWZ7/wDBj5S2GvisQ7QA1YlkcPkFP:OGjFqA8gfMwDV56C7ckccFP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773061087, "uuid": "b902a214-296b-4046-a3c6-bda46371cf8f", "value": 650304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773061087, "uuid": "8fbec12e-894d-495e-a535-cda346a34e42", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7233450f-1bbc-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773063160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063160, "uuid": "a4c49111-8545-4d73-b1fa-3947521f446f", "comment": "Malware payload", "value": "74d179b133d017b8197eab37e4ee59d4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063160, "uuid": "cde66694-f501-431d-bba4-143ce5292f80", "comment": "Malware payload", "value": "8319db5d703d6bf7433c5b2023cecc4067bd4873bd35a59b6ee613577993bb8e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063160, "uuid": "c8beecc1-c037-439f-9e23-aab9dfddb873", "value": "T140F29D9563C1E40766CE5F53BF16BEE8E02AA87679C4A40792547BAC6CB8107C2F4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063160, "uuid": "ff3d175d-34be-4b1d-a9bf-8283ba808cca", "value": "768:U9GFrXn/5RXKNlwb5mQaBEtGMEzvfZktknhfboNFXS8w6HWHppT8WGaLrlrbmhqG:15VfTHWHppT8WGaLrhb6qG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773063160, "uuid": "16ac8aea-912f-4c32-8f5b-fa79ad3e1f50", "value": 36700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063160, "uuid": "3f443001-973e-408f-a225-10343163af43", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdf389c8-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773063744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063744, "uuid": "d26828c4-3451-471f-a466-b9b08bfb752f", "comment": "Malware payload", "value": "9fcfb6f2f4c429410ba73da4023105d0", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063744, "uuid": "0c2be4f1-7915-41fe-991f-fbb12b0397e3", "comment": "Malware payload", "value": "8adcea233db10edaf4931971d9980007fd4ee2c3bf22a664d3603ec73afc8178", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063744, "uuid": "a2ff06af-4cd0-4f51-bb8a-fcd5c22dcb26", "value": "T1CFB65A87E8A115E5C1BDE13089669263BB717C485B3023D72BA0F7683F77BD06AB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063744, "uuid": "6e3d328a-b255-4a8e-a50f-529e374e7739", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063744, "uuid": "654fa64c-7765-482d-a027-8f1168a601de", "value": "49152:FLW2PrEZVHsPS36p2yWspW8ipAJZs+/EPESppZ2XS0OuZ/oFsI1Mp8a/vmuwQ1kG:FLXFiRuEc6mE1O0QCeD6e1mPibjTXfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773063744, "uuid": "71ac94f7-2a1a-4cd3-87dc-801e12686e6b", "value": 10883584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063744, "uuid": "c124066a-1527-4e52-ab10-0e78a6264222", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b628d38-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773063847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063847, "uuid": "42fa7808-27d8-4262-bd6b-ea219bd67fc7", "comment": "Malware payload", "value": "d83b14bf9d27ed2de85e0ca7a197ee00", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063847, "uuid": "f6ff764e-6c9b-413c-a356-8f2b73cc5e7e", "comment": "Malware payload", "value": "135f364dc359b45a24a59965cc233660bc25dc7e5a484290479bf30158c22652", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063847, "uuid": "ba8f36b0-ce33-4201-b4b9-60c311013a5a", "value": "T1C6D312E3D3E212C8B8006C537596525D2BB0EF59801995C373A91AA1E37BEF4F4359", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063847, "uuid": "b9ceb5bb-9e12-4b07-b87d-0a29df4235a8", "value": "3072:VS+1MbWRMMu4CbqNfgJ3b50qveN3ngalblYSS6yFOB:VS+ybWRBuPbCfgpb6qveZngMlYr6ysB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773063847, "uuid": "ed58904b-d1e0-4565-8987-648d2589f7c4", "value": 136543, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063847, "uuid": "38c44ea4-738f-4d7a-9b29-2e6e8b4efc95", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "301226db-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773063908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063908, "uuid": "78a0005e-25eb-407f-989f-742692154fc1", "comment": "Malware payload", "value": "e22c74604665bd91c132139d41a939b6", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063908, "uuid": "c3b3ef1b-698f-4e27-b3cc-6f724ce97f90", "comment": "Malware payload", "value": "258b0dc1c9e1df289b2a0e971f0b49648f725c3b540b8f3af42be3403ee31239", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063908, "uuid": "454113c8-a16f-48f9-8a63-ba7b65e8f67c", "value": "T1B2B42690926C8724D8A418B4AC63446A2F74BC3D4CE6955D7DDB38DB2775332EA3C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063908, "uuid": "ef1aea9e-6ac9-40a3-8d84-4d943b511066", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063908, "uuid": "4c4e5a2b-8d6e-4c9b-886b-fa3c6dc11958", "value": "6144:jInodSpIAQr1WnzDVZRa+61R8/D9SIAQr1WnsDVZR:jInodDjxWzDVt678/DljxWsDV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773063908, "uuid": "2b533afc-e5d4-41ea-ac6a-6482399086b7", "value": 510976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063908, "uuid": "201e48c4-39b5-4c54-a5a2-aa627e13cdf2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f01630e-1bc0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773064927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064927, "uuid": "f25ed335-c081-46c3-93b8-a5524110812d", "comment": "Malware payload", "value": "0679856f2a85fb302ba615390688b5de", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064927, "uuid": "57e51945-a725-424a-b4e8-29c8f0f3f501", "comment": "Malware payload", "value": "ded9c92f674cf95aeccfa9e50ad0d48dfeb1fc7ad6e5d01999bd14abacb51176", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064927, "uuid": "61a737c1-9804-4b3d-b64f-66d01e4c03e4", "value": "T136B43B51FBD62CDDE66382388D974376273CFDA05622E71B252472243E13AE0EF997", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064927, "uuid": "7fb05664-006b-4213-97c8-817245087f2a", "value": "4739a33797faa46010db7ef60eeed53f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064927, "uuid": "1c3bfce2-4955-488a-83bc-c68f6b92aff0", "value": "6144:cTP11GsDQAZETAJ2bL3ToqBpCqpfKU6wmPb2PbkHrQpFeDWE:YP1MSQAZgG2LoqjCqt76JgkHUFeDWE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773064927, "uuid": "596cf15c-8103-46a5-9399-f2fcaa6ca014", "value": 536204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064927, "uuid": "8fbcead1-5faf-42dd-90cb-b2db3cf2d4b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9dac02e-1bc0-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773064972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064972, "uuid": "92fc45f8-bda4-4a14-9fd1-7243e09bf4d2", "comment": "Malware payload", "value": "884d8f2f4111d298096152ecdc751903", "object_relation": "md5", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064972, "uuid": "5eb9c85c-ead0-4a47-9b0f-f7892bf71c7f", "comment": "Malware payload", "value": "1b9115b928239d2adea06d84ba8ed34c5ab1ba9ee68893b49dd2cecdf5711ca1", "object_relation": "sha256", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064972, "uuid": "f89f7abe-3e44-4ca5-9f72-90f3f0a9a08c", "value": "T148C3DD99CA9B4F895B432C70E54B484BEBB52D03391AEE70B72D82417F4BCA815F9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064972, "uuid": "6bfd5860-d3c6-40a0-a3b6-1dcb922397f5", "value": "1536:BpRap+9YMXzEhRqYfTKm9no5U/AWQ9MejxOzvOS:wWtUYHPi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773064972, "uuid": "5f08aff9-31cb-4d0e-bd2b-2663f8a546e2", "value": 123058, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064972, "uuid": "770abb93-1edb-4a21-b753-1622b4145245", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "011bbd6a-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773065118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065118, "uuid": "13ffc565-dd8b-45e2-b29a-48265c52a9fd", "comment": "Malware payload", "value": "d41aaf897fd2e98259219ba64545eb62", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065118, "uuid": "63944646-4bef-40cb-a9a4-9f2595e5f1a7", "comment": "Malware payload", "value": "bb97f2c6e31ed15e9d16a2ab72f46c86bd645d6ef91f2e365ad42abc964247c5", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065118, "uuid": "bb74cb58-3014-4ff7-9f0d-7c62a7ace9dd", "value": "T126763381B39928EAF867813AC452D608D372BC5517B0C77717E48A5B1F5B3E02E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065118, "uuid": "74740347-270f-42c1-a499-c7f38fa30aa6", "value": "351592d5ead6df0859b0cc0056827c95", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065118, "uuid": "374730ef-7013-4126-9a0f-d443fc24f82f", "value": "196608:nDv8SspdQmRrdA6ly8Qnf2ODjMnGydScSEPrP0XX:7lspdQOl6F3MnG3tOrP0H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773065118, "uuid": "00773616-2154-421d-ad16-e2378129cff8", "value": 7611352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065118, "uuid": "1f0cee75-d220-4672-bd41-61fdbc61c327", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b85db240-37a3-11f0-b041-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773065557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065557, "uuid": "526c6368-2632-4556-8b4f-5c326b476bf9", "comment": "Malware payload (Mirai)", "value": "d1a32f63fef8e639a63d85e46753c0ae", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065557, "uuid": "8c7792c3-2dfa-4909-a1b4-cab59b1fd009", "comment": "Malware payload (Mirai)", "value": "8d7a4ac8629db62457447673fd5e3ae857bdf5c4bda46f6c2abc53b3315f4bf5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065557, "uuid": "bc78014a-e0ef-42f7-a872-09509ae07ee3", "value": "T1A2259E03E9D040FEC8D9C2B44FDFA127AAB2B09A1234B65E3AD55F513F59E209B1E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065557, "uuid": "a82e1c7b-7f3f-4b95-8138-272bb59ccf6e", "value": "24576:AEojiRnPORZM3eG2sw/7GNaQ6YoUMNCG611hkb8LBv7:AEojiRnPORZMOG2sw/aUHNNk11hkbeBD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773065557, "uuid": "e9763345-ecb1-46d8-9766-61afb783b40f", "value": 973200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065557, "uuid": "7f1b69d7-45b3-449a-9f55-1b84ee5afbfd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dd5e5cc-1bc2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1773065623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065623, "uuid": "9b506670-0e6e-4937-a232-d759f90f22ff", "comment": "Malware payload (Phorpiex)", "value": "362fc53afbda6450184b73746802a6fa", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065623, "uuid": "3fd84ce2-7f46-4d3e-bd07-60a00bd2831e", "comment": "Malware payload (Phorpiex)", "value": "8e2b78e7c586e36dc3b27c78466fad735f86cdd9b4e7ecbc4c650d934a9a176b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065623, "uuid": "c4cebc2b-fe78-4808-b081-f3bc589ad7ca", "value": "T11742290AA8091831F3E204B2573E82938BBD19A337D5F9DBFB8067090DB53D5D1796", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065623, "uuid": "71cf16ce-bcf1-458e-89f1-d1ef7ed516ba", "value": "27080eab3ded4a4cce0697f22f2df921", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065623, "uuid": "7e1b48df-a334-42cf-b7cf-c19dcf759141", "value": "192:yW0eU9Y0G5msXhBee6JPJXJxTNerBthIHMzQoh:P0TYgsXhAh9xBerBgMz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773065623, "uuid": "81d134fb-7066-40ab-a14d-1ecc20272706", "value": 12288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065623, "uuid": "9b0947ff-b56c-4891-be13-fd479d277192", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a88b8441-1bc2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1773065829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065829, "uuid": "35d46493-226c-4028-ae08-73103accd2b0", "comment": "Malware payload (Smoke Loader)", "value": "e7a4be287d7ea92cdae61c93dccfc24f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065829, "uuid": "1075f09f-d52e-46f8-9934-bc54bf7d349d", "comment": "Malware payload (Smoke Loader)", "value": "a8952a36f1f43676af720d38a8883bec6d610522b0c1410eeda740fba17d89a2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065829, "uuid": "43ec5d98-e144-431e-ba48-7ce0b994c7d2", "value": "T1EB243A2BC25330FCE553C07892A66232B772BA3D47358EE70293D3359D61AC05FBA9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065829, "uuid": "a0a0cbe4-7f64-4fcd-9319-61770e2f2701", "value": "c81db0a320cdad5ab41c9a291ea9b6e9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065829, "uuid": "cb013014-df19-496c-9f94-2b7d202ab324", "value": "3072:Ry+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJw9r:dDPgIuXHnZQyUSC/5ubfhce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773065829, "uuid": "a7146d19-0525-484a-a324-802005cc9fa0", "value": 223744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065829, "uuid": "81f69b57-dd27-4b10-afa4-476c261b7c0c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ce29d1d-1bc4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773066534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066534, "uuid": "ffc14196-af36-4e24-b131-b0e5786d0de9", "comment": "Malware payload", "value": "959e03aea0bf2bb57d9a9972f84128b1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066534, "uuid": "453256b8-2fbf-4701-a8ab-a00f68b93f53", "comment": "Malware payload", "value": "7f3abd1caee36c8d8fa1e5147a90244b9e606997eba2f628f7db609ddfc29451", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066534, "uuid": "5957867a-6912-4f36-b2b6-7db57bdc5c7f", "value": "T1FE93093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066534, "uuid": "9cdfb5e1-a691-4d72-8864-26301c5cc5b2", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmixPsCZKT6i:pisIbzEStkbFvnw05S4jrzPsCZo6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773066534, "uuid": "28e2099a-9d4b-4fc5-9721-78369169f478", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066534, "uuid": "45cc194d-2a1b-46d9-980f-c02c636cf44c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c911bb14-1bc4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773066742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066742, "uuid": "abbe2c88-6a35-4754-8c35-e1739e212aae", "comment": "Malware payload", "value": "1b31e9dfad294870e0aa33e1c27a6ed4", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066742, "uuid": "31d5ece3-7c0d-471c-8775-b0cf2f070eb4", "comment": "Malware payload", "value": "55e0a48d00b66f4120c0ee4828203b60575af2a7b934615b41b52a742c18345c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066742, "uuid": "2fec4a2d-4e7a-4574-bed0-dafcc2ebf7cc", "value": "T14C920D538B35CEB811E883DEE685FB632B4D88653510DAC2B9E67DFDCE590152021B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066742, "uuid": "5663db07-ac50-454b-a2dd-3b59212834d4", "value": "384:ojfPqTpOI9M5bVxWVwYBt4HPCuzUeHUlPa1k/HbRF//IwUA8H8PV/clkfxNPimL2:ojfPqTpOI9M5bVxW+YBt4HPCuzUeHUlA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773066742, "uuid": "fa26d04f-0c54-469a-90b8-8c7bc6cc538b", "value": 21150, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066742, "uuid": "b11910c8-ae3a-46e0-adb3-ef45988c89ef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773067054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067054, "uuid": "8b4c7d0b-b7f2-4ae1-8266-4de867345fb4", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067054, "uuid": "9be92d1b-9c22-4ca9-bd3d-60d28bb902c4", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067054, "uuid": "1706c3b2-eb27-412c-9ede-42a9dd51d698", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067054, "uuid": "e37cbb5f-4f00-4240-a105-f0710ebd6cb6", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773067054, "uuid": "55a2a84a-152c-4a81-9289-a1e47eac39b7", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7058824a-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773067452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067452, "uuid": "3afe7a61-c6d3-4032-b4ed-eac052c789cf", "comment": "Malware payload", "value": "68b137fdbb355f69e71477925cef5b92", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067452, "uuid": "f4f71b28-04f5-4982-b2b3-b84905d86005", "comment": "Malware payload", "value": "31d490d2749870ba907085a720bffa71d210d05be006d14b69b817103d9435c3", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067452, "uuid": "5d62fc75-1b33-4a8c-bdf7-ed1f9e0de830", "value": "T19C02507DE5A9BDC0879B7781B5C7F6D2204A9B137A770AA8E6C404910B0C158FB7D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067452, "uuid": "9c0bd206-3c74-462e-9e1e-3de869d939dc", "value": "192:scUdLwcEAHmxz6MoK0bZEYYAA5BoPKg/s/DCFkJyDbRjZF:sN/pHmxz6MoKiZEYYFBoPdU/2FkADbdj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773067452, "uuid": "245fa957-586b-4468-9fe5-c707964b51c7", "value": 8708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067452, "uuid": "4b8e9324-fd7d-4986-90b7-cc1567ee3779", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acfec614-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773069272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069272, "uuid": "6e95e679-b7dc-443c-b84d-61082990fa02", "comment": "Malware payload", "value": "e0e32eb428a30d89fc7e9d8efcf2ba15", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069272, "uuid": "f5c84a3b-44a1-451c-9cd4-8133d3c81dfa", "comment": "Malware payload", "value": "95ca8680bf2d5117b044ac59ff9bd31b2050bedf26eb487dfc2a9728c990a48a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069272, "uuid": "763996d3-7982-4299-8f90-83935fa5f2b3", "value": "T198A2C734B104ED2E95239BA9E1B5AF3880EDC26ACF0B8C5CF27CC5551786CB69B539", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069272, "uuid": "72498b69-bb0a-44dc-a7c7-107462712881", "value": "384:D8E7JO9uvz36SAVkKTmO3sx27gfe/fRBEwy4Vilh9oqyKuFokwd:D8E7JO9urqSAVkK64ss7gWxBE14Vilhl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773069272, "uuid": "3c7e903b-5af0-4a30-8a14-b473375730fd", "value": 22687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069272, "uuid": "80de3e18-5abd-49ff-9a09-0c183f26d6e4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef6403c6-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773069383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069383, "uuid": "470d7fb5-db23-4be4-b64c-2c8f40115c0b", "comment": "Malware payload", "value": "2a3860c8bc26a475a9373053462ce14b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069383, "uuid": "8110b88f-47fd-44ea-a2de-a1f24cbae7f2", "comment": "Malware payload", "value": "b50d8a45b06eb4ea0ce26a8a17eed59b50dcc44a53fcced8e708837368882bef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069383, "uuid": "d44d6b7c-e41e-4b55-9be6-cdb210a70139", "value": "T1DD8309327488582A210B428FD367336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069383, "uuid": "85823f65-d29c-469f-84cf-bd79b514327b", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbntWa8VN/:XEKltp9txAX/yr2pbtWZVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773069383, "uuid": "0dab322a-29fd-4494-b98c-1eeaa56016d7", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069383, "uuid": "9dfcfba0-3565-4f97-afd0-4005192ef030", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b9f7d4c-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773069672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069672, "uuid": "0acd0a73-5764-4ceb-b835-340039e0b3f9", "comment": "Malware payload", "value": "7a0a7c27fec143aa5f30635f07af895c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069672, "uuid": "20628e28-85a1-410e-b7de-b46931df970e", "comment": "Malware payload", "value": "ea612fcb5e468e23536d944a122cb5c2427c6eb5cee3937ecc455b3524994416", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069672, "uuid": "1e80db85-a82d-4f0e-9433-fc05bb0ec616", "value": "T12134CF6770E9C1F122376C6AE8103CBAD61447D4A75A7E61A53C26132C2B0EFDBAD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069672, "uuid": "5ae6675f-5a16-473f-834e-b82c874a175c", "value": "3072:S/FlQ1Uckhh3n+GkEkxuOntTfVxssR9SVGhtnv/2pBMoZH1NCkLcGLyIoHOviLrl:+Fq1qh3+Gk/t5ms8MoZHJZbviXOjY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773069672, "uuid": "4c416908-d0d1-4b46-9497-28876a8b9968", "value": 247878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069672, "uuid": "627c0bc7-96e2-4837-8f55-5a0c7219e1aa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b87b0cc3-1bcc-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773070150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070150, "uuid": "3045ea44-2696-4609-976d-abf265f8799c", "comment": "Malware payload", "value": "48a49b4106651980d4c8f085c7127be2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070150, "uuid": "ecc939d3-53cd-469b-914e-89eaddbccb97", "comment": "Malware payload", "value": "ba7ef9a1b12b607e408e8c1fd3fe76c43e1aaf9ff05749755d25348bb763e960", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773070150, "uuid": "5107b7fe-aef0-4558-9638-f86909f6e900", "value": "T159A5F10EE2227C33CD77B2FE509B524AD719A44B11D85DB366CA59380B4B6243F3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773070150, "uuid": "d5485825-55a6-4d7a-aa65-ea2776b2e106", "value": "49152:r2bl03/degaX2j5LVIAwcLi7aYg2ZOAB3uWF+R:KECwVIHPvtJ4WF+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773070150, "uuid": "e6b9dd8e-4ed9-4d6e-b8e0-7fdaa3fc7a43", "value": 2144163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773070150, "uuid": "83d82dc3-dd1c-4947-9f06-9e114f787784", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ddaf7d-1bd1-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773072127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072127, "uuid": "0fa980b8-3cd1-42f2-be62-08ff7e33a461", "comment": "Malware payload", "value": "61dcde1ab53e377c8523b9c3de0e991a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072127, "uuid": "6bba3acc-9929-4041-bbc7-7c34f8beb2a3", "comment": "Malware payload", "value": "cb37269dc15769ea6c3ff55d5eb868cd8914244afeec3a8d26563fb910bb9673", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072127, "uuid": "c9fe6e10-e0b3-4c89-a0d7-23a42cb451ee", "value": "T1F8C36B5773E130F9E27AC675C4650A0AD7B3B87513A1AFEF07A042552F232E19D39B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072127, "uuid": "ecd3780b-54b8-4590-89ab-fc1d323d9d2c", "value": "ddb7e22698cd18ceb0a6d87b25da347e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072127, "uuid": "1b54f776-0380-44b2-abc9-6745c7cb9513", "value": "3072:sLdgA6QI96rezQLPf5c0IDRMcEF6lATdby35222222224M:sxgX++QJIDNalTsOM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773072127, "uuid": "b610b4bd-b069-4a3a-822c-99e67dd66a44", "value": 126976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072127, "uuid": "c16f0638-0378-4244-ba75-a5e163977de8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf236be-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773073028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773073028, "uuid": "9ba71ddb-9793-4153-b912-cd8096c33cbb", "comment": "Malware payload", "value": "8b6194fec7656c4ade637c6455790477", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773073028, "uuid": "83fea518-9acb-46bb-ae1d-52c7723e11a8", "comment": "Malware payload", "value": "afa372bf1f0d40796c80ae6a3ab00fced755bc2730d857cc86ba1a7d5d578b30", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773073028, "uuid": "77617906-ac4e-4f7b-a998-497c3ecfdde4", "value": "T19CD533E9707DADC49C7C95CE02B0AC8F58F2F9FB9E9606917C0668074D279E38C164", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773073028, "uuid": "25198bcf-8226-4990-b82e-69b126f44345", "value": "49152:tMmkxxrEBMuW3UkZuAtstVLG7fQulbiUvR0qz+cOzWJwjqX4N1jDzSJ0Zb:K7xxr0gbuAtoVLG74+bfZCWWqX2d/cW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773073028, "uuid": "1bdd1067-c3bc-47a0-9a9d-bd3faadcc397", "value": 2788944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773073028, "uuid": "8a0ddcb5-92c9-46f4-99f8-ad7047d0c237", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26f97e1d-1bd9-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773075490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773075490, "uuid": "f2af6230-b750-4ca6-b5ab-12696d682ef3", "comment": "Malware payload", "value": "fc07c6f0d1f9cad554cfd4e50cfdb8ba", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773075490, "uuid": "bba8e804-40a3-43f6-ab7a-66ecafd61ab3", "comment": "Malware payload", "value": "db347d96c00677412f6fa3b06b96ace322d816129dd8e4ea79620932535b7729", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075490, "uuid": "c56b8e5f-b6f1-4ffa-b6c0-49ea4b32e509", "value": "T18A1733D455F03CDCCC12D9F2E7AA2ADDD1A52C260C31546B7F893E08AD3CCA6CC569", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075490, "uuid": "8efb21ca-d2af-4f38-865e-d5264edaeb4c", "value": "3d9d4fa0f734aa85e027438ca479fbf7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075490, "uuid": "954ed72b-c803-4b4f-876e-3a2c0cea7f48", "value": "393216:W8dYmGoOwgbyTOtHe7bvoAK88xp19WQK1iSlYkY35cy:PdfG8TOtHwoT88xp1rKlYkE5L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773075490, "uuid": "0c6048ea-9173-4a1f-934a-b9de33e0ad36", "value": 18813104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075490, "uuid": "7fbbdef0-e687-4b3f-9472-68a825633989", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6025d0cb-1bdb-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773076445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076445, "uuid": "1db45366-7bbc-42f8-a5fc-0aba3a8c1a0c", "comment": "Malware payload", "value": "500266c91b0ec8e57c12216f8bedaf37", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076445, "uuid": "8552c88d-6a66-4a9a-bf8c-95ea60c9015b", "comment": "Malware payload", "value": "c87190a157719caf07b908d6650884d0e429a7f896afa4a3e35ed00382779af2", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076445, "uuid": "96cc4e21-23b4-458a-8c33-6d3442bc6ebc", "value": "T126E21BF692C031E5A047E3F5FC676B99722E70BFB7058998C6E40984E1C697C89ACD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076445, "uuid": "b91e89fd-3a24-4cb8-9948-f852a7352c73", "value": "768:4yF7Qsuypgn/f7RmHL4yDCwSrLSMLFjSxu/ern352T18SI5jID:4k7QsuySnn23MsxE1u8D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773076445, "uuid": "9641c94b-dddd-4d91-a03e-b22482ce6cf9", "value": 32012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076445, "uuid": "cbe3e643-ecc9-4d18-aa9a-8a0e7904780f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027af1f8-1bea-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773082730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082730, "uuid": "3f8d0510-7388-43ea-a99e-a82fc02d9de1", "comment": "Malware payload", "value": "47449963235e98d530d9846ff3e3eeee", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082730, "uuid": "cdeea1c5-a35e-4387-a67e-f1dd2bc49fd5", "comment": "Malware payload", "value": "e0736343995694ff58730fbe06ef210410c383fb22d42db8f4aefe9c08d24cfc", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082730, "uuid": "64675249-036f-467f-8d3e-b64915fb155f", "value": "T1F3833C1A987E103B2797A5D17BD86B4F31C2301FF7569C283EFCA1604F1AD7D8988A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082730, "uuid": "8526c357-2910-4cc1-b9e2-caeb19db95b8", "value": "1536:F213x2KKSt0Epo00BTnZMTOcSMfRN3qMEMBayY0b:q3x2ytVvAnZMj/nr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773082730, "uuid": "93f68777-a50d-4baf-8b68-0e5b57b51c22", "value": 88126, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082730, "uuid": "33fac9f2-8a04-49b9-a8d4-89de5a5e3f62", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f31f3473-1bee-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773084852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773084852, "uuid": "131b4015-3a7b-4c66-8a9b-cabd3393fd6c", "comment": "Malware payload", "value": "a929ec3955d6f2494323109caad4e0ae", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773084852, "uuid": "74bd91bb-ffb7-4011-93b8-f3cae153aa2c", "comment": "Malware payload", "value": "8c5682afe2a14bf8d28f9ae3d9c46e9cdd9484cc91ab5d038eae70e50487b7c3", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773084852, "uuid": "84bf3fda-fdff-4e50-8555-a042fc2240b7", "value": "T1CA21D859477E969BD692397BC52F0374FE555D2CF6A1F20B83111308CF1405E2A198", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773084852, "uuid": "54a1831c-bad3-4878-871b-99feb65a055e", "value": "24:3h+99UWWRrndQTUl0/qaqOMFvoQuLZMGdaYplVkriAEiwF4t02ZD:A8dY1iaIuL1TKQFCzZD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773084852, "uuid": "5cfa831d-e1c1-4c68-a799-925bd6d28e3e", "value": 1388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773084852, "uuid": "65d850b6-36d7-4a4c-9480-f5ab43bdda15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1d67e14-1bf9-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773089520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089520, "uuid": "876a9a16-eeec-4667-b4e1-80b2420aa4d3", "comment": "Malware payload", "value": "6a641ef4eb91c26e47857f03abbc191f", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089520, "uuid": "5ea06aaf-7cfd-4b4c-9c20-48df28b46f30", "comment": "Malware payload", "value": "b545bb595b332d6d8e13a57d2f968fb35e4b5c39eaef92d57f0881ddd8380dd7", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089520, "uuid": "72b51c8e-3796-4ef6-a3d0-11d0a4c3b776", "value": "T1A83613B72346A9E3C61361931D39E3792B53C1D5249BB348AA535FA34B284CD371A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089520, "uuid": "c4e09b6e-960d-4b35-b70d-3258cd07cdfa", "value": "384:Op8o778ckGOTuN7TzMWh1Me3Q9XYRAcorHZXYRAc/MYyCjfp8oK+jMY+uYoCkYZQ:w8oQ/W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773089520, "uuid": "fee27036-fb96-4183-a1a7-149dc87a6f0f", "value": 5340598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089520, "uuid": "a1e872f0-14c2-41bd-8e9c-969e9891c481", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0290aa8-1bf9-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1773089544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089544, "uuid": "01f40f05-2eb2-4b56-825e-589c6ae2b66e", "comment": "Malware payload", "value": "6596e41be67822b6de7effd8c220658d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089544, "uuid": "618e4a91-441b-4a3d-8175-7fc1308b45e2", "comment": "Malware payload", "value": "321335d58682dadfb8cf750d880920b020dc8a653ca4b3734b64cdf7e5d07d64", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089544, "uuid": "a17933bc-656f-437e-88fc-d65f7d27928d", "value": "T180A2D0EF0BD45AA55218EA2D708BDBC0778F40C109E40162610EB5ED9FDE69DF9E80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089544, "uuid": "8ecd0a4a-b4f8-4829-9449-7e3116a62337", "value": "384:UN1OM3RO2W+3J8cqaEPW/44vXJV2vruwfVDug8fLZOsn+seKsVQ6hU2lcQJoK+wF:UNcMBOJ+3J8xPO44vXJV2XVDuxUsjWO+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773089544, "uuid": "28a8bbc7-994d-4ada-a3b8-3b2ffa0106ee", "value": 22784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089544, "uuid": "458a4fb2-763f-4da4-aad5-c251cd633b4b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd6f080a-1bfb-11f1-8a4c-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1773090399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773090399, "uuid": "7ad01db4-4253-4e32-bdad-4dac6a6770a8", "comment": "Malware payload (GCleaner)", "value": "1a00e942ffceb684f418ee22bc4e6fa1", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773090399, "uuid": "4c1db99f-615f-456f-9b98-bb7bd11a12e3", "comment": "Malware payload (GCleaner)", "value": "76e3d38d07ddced1163067b0f0f36cd706c9a636365d20c9670077c51fe9c11f", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090399, "uuid": "4167044b-b7c7-4510-bb33-f9f2afe8eb96", "value": "T12A058E33A2B14133F1637A79AD6A965C84267D01292BA84737E41DCC1B397CE3D2A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090399, "uuid": "d3cd4858-e1fd-42e1-b121-68330b9c6c09", "value": "b4f23b226dcba875353fef47ef080ee2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090399, "uuid": "e2d9f970-402c-431a-af19-74801de8e548", "value": "12288:4+SjR5CjbtVynUSoAsUhj20QmEvgbLBIprKwMZvjE/pxOBI8oXYVb1VbBLbe:+N5C3tVVSbjhj20Evgfl97W/8ooVJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773090399, "uuid": "34831310-459b-487e-ae5c-21507bd9def5", "value": 864256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090399, "uuid": "3101c483-ec56-4331-96b9-3269edc74a54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014422, "uuid": "f7d6ab44-1b4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:36569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014479, "uuid": "19ed2edd-1b4b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.172.228:60809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014587, "uuid": "5a0186ca-1b4b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.63.10:57380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773014710, "uuid": "a35990e1-1b4b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://clay-logic.redclay.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773015197, "uuid": "c5e534be-1b4c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.145:36174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773015307, "uuid": "07a0cfb8-1b4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://clay-gate.redclay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773015496, "uuid": "77f80584-1b4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.248:36839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773015497, "uuid": "78cd4935-1b4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.189.223:56675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016027, "uuid": "b444f370-1b4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-unit.redclay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016331, "uuid": "69f08dfc-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-ref.oakbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016388, "uuid": "8b868bf1-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8261736065/6QBuVkN.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016456, "uuid": "b4003e9c-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.199:44204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016459, "uuid": "b5f542e3-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.152.129:51808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016573, "uuid": "f9b870b2-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.3:55313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773016820, "uuid": "8d06d623-1b50-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.31.202:56402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773017167, "uuid": "5c0b444d-1b51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oak-v11.oakbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773017299, "uuid": "aa68ffa6-1b51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.189.223:56675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773017306, "uuid": "af00311b-1b51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.160.2:56048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773017646, "uuid": "79b928cc-1b52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-base.oakbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773017827, "uuid": "e583ea5a-1b52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oak-net.oakbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018020, "uuid": "5840ff14-1b53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:35985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018020, "uuid": "584cec99-1b53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.3:55313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018020, "uuid": "58635834-1b53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.152.129:51808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018021, "uuid": "58d51bc6-1b53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.38.201:41198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773018310, "uuid": "058e7b4c-1b54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.31.202:56402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773019148, "uuid": "f88bfdde-1b55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vult-node.nexoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773019329, "uuid": "64d53e43-1b56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nex-v01.nexoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773019452, "uuid": "ae2e2f92-1b56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vult-sync.nexoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773019459, "uuid": "b1ffdada-1b56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:35985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773019926, "uuid": "c8b5ca48-1b57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nex-base.nexoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773019941, "uuid": "d183959b-1b57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.117.77:38840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773020408, "uuid": "e7871912-1b58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-hub.zenithra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773020422, "uuid": "f0080771-1b58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.114.234:34357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773020893, "uuid": "091d527e-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.199.175:59521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "b73d3c68-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.9.241.34/n2/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "b7733cff-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.9.241.34/n2/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "b780a87b-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.9.241.34/n2/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021186, "uuid": "b7a0013b-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.9.241.34/n2/teleport", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773021312, "uuid": "02acf474-1b5b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-v12.zenithra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022452, "uuid": "aa5a70c7-1b5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.62:54007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022526, "uuid": "d642f22d-1b5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.255.197:35881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022640, "uuid": "19e723e3-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.101.131:36497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773022746, "uuid": "597a58ef-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-net.zenithra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023064, "uuid": "16b346d1-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:54187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023132, "uuid": "3f2bd02a-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.129.247:48866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023345, "uuid": "bea9b52f-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-flow.zenithra.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023354, "uuid": "c3a7caf5-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.255.197:35881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023356, "uuid": "c4e91c37-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.15:60973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023596, "uuid": "53b77866-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.41:51572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023597, "uuid": "54565d83-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.34.70:35175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023707, "uuid": "964a6c64-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ops-gate.lumitron.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773023722, "uuid": "9f3527ee-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.15:60973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773024011, "uuid": "4b48f018-1b61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumi-v3.lumitron.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773024078, "uuid": "7338ea2d-1b61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.249:49584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773024140, "uuid": "9839a4e6-1b61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.62:54007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773024742, "uuid": "ff42382a-1b62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:41096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773024744, "uuid": "000e062d-1b63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.129.247:48866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025104, "uuid": "d718d4d7-1b63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.255.108:45621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025223, "uuid": "1dbc53c6-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.34.70:35175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025223, "uuid": "1dfa13fb-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.41:51572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025268, "uuid": "38bce155-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ops-unit.lumitron.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025507, "uuid": "c6cc8dc1-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumi-edge.lumitron.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025643, "uuid": "18072f12-1b65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.101.131:36497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773025821, "uuid": "822d7a28-1b65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.246:37172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026111, "uuid": "2f44b292-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-core.veloxis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026124, "uuid": "36f8fe00-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:41096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026125, "uuid": "3770c739-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.117:41399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026721, "uuid": "9acf8cb2-1b67-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.131.190:43483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773026830, "uuid": "dbc162bd-1b67-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.158.18:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773027497, "uuid": "690fc421-1b69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.246:37172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773028161, "uuid": "f4dd1134-1b6a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.117:41399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773028639, "uuid": "120fe1f8-1b6c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.249:49584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773029476, "uuid": "04c3ad8a-1b6e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.38.49:49381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773029596, "uuid": "4c560195-1b6e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.248:36839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773029721, "uuid": "970ed170-1b6e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:44035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773029781, "uuid": "ba8462b4-1b6e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.149.79:49269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773030440, "uuid": "43734ef2-1b70-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.235:53975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773031937, "uuid": "bf52bb04-1b73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:50497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773032004, "uuid": "e7cb987d-1b73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.149.79:49269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773032111, "uuid": "27884a61-1b74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.227.204:59158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773032178, "uuid": "4f1ba653-1b74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.184.209:39339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773032178, "uuid": "4f8ae398-1b74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.158:59619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773032473, "uuid": "fee5b770-1b74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.78.159.183:37390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773032538, "uuid": "25d26e61-1b75-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.58.107:40096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033015, "uuid": "41ebf6ef-1b76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.199.133:32991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033016, "uuid": "42a62576-1b76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/magmaworkerpruner/valorant-external-3.0/releases/download/new/ValorantExternal-3.0-x64.rar", "Tag": [ { "name": "pw-valorant_git", "colour": "#2ea43e", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033130, "uuid": "869dda87-1b76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rutvikpatel8854/Ultra-Game-Performance-Kit/refs/heads/main/sibness/Game-Ultra-Performance-Kit-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033130, "uuid": "86d0b3a1-1b76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rutvikpatel8854/Ultra-Game-Performance-Kit/raw/refs/heads/main/sibness/Game-Ultra-Performance-Kit-v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033334, "uuid": "005c116f-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.211:50911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033427, "uuid": "379e7a83-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sacapalabanda/VALORANT-EFI-DRIVVER-Cheat-Hack/refs/heads/main/Hyprism/workflows/Cheat-DRIVVE-Hack-VALORAN-EF-spondaical.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033427, "uuid": "37c464d5-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sacapalabanda/VALORANT-EFI-DRIVVER-Cheat-Hack/raw/refs/heads/main/Hyprism/workflows/Cheat-DRIVVE-Hack-VALORAN-EF-spondaical.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033489, "uuid": "5cd2f206-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:50497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033494, "uuid": "5f793496-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.136.64:40455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773033741, "uuid": "f2da304f-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.184.209:39339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034158, "uuid": "eb6d1e8d-1b78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.71.74:53630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034222, "uuid": "119bea0c-1b79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.9.50:46115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034222, "uuid": "11d21dd9-1b79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.58.107:40096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034399, "uuid": "7b0c0043-1b79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:56942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034414, "uuid": "83f60e47-1b79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.211:50911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034511, "uuid": "bde981b2-1b79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.78.159.183:37390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034628, "uuid": "038f184b-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.114.13:34661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034629, "uuid": "047038b7-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.199.133:32991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034749, "uuid": "4b86fbac-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kolorado772/Pixel-Gun-3D/raw/refs/heads/master/Source-Code/Pixel_Gun_D_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034751, "uuid": "4d10a0fa-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kolorado772/Pixel-Gun-3D/refs/heads/master/Source-Code/Pixel_Gun_D_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773034943, "uuid": "bf93faee-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.219.3:59672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035049, "uuid": "fe8fe26e-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zulkox/Atlyss-Cheats/raw/refs/heads/main/neoclassic/Cheats_Atlyss_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035052, "uuid": "001b7e63-1b7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zulkox/Atlyss-Cheats/refs/heads/main/neoclassic/Cheats_Atlyss_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035169, "uuid": "45c106f9-1b7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.136.64:40455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035295, "uuid": "91514643-1b7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.121.203:47275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035649, "uuid": "64454ec2-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.245.10:52312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035649, "uuid": "644ed012-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.255.108:45621/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035652, "uuid": "65cb11cb-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/1o-s/Forgotten-Runiverse-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api/refs/heads/main/Forgotten-Runiverse-Bot/Utils/Clicker_Cheat_Api_Game_Bot_Auto_Forgotten_Runiverse_Farm_Crypto_lozengeways.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035653, "uuid": "667dad11-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/1o-s/Forgotten-Runiverse-Crypto-Bot-Crypto-Game-Auto-Farm-Clicker-Cheat-Api/raw/refs/heads/main/Forgotten-Runiverse-Bot/Utils/Clicker_Cheat_Api_Game_Bot_Auto_Forgotten_Runiverse_Farm_Crypto_lozengeways.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035779, "uuid": "b182a783-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.71.74:53630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035828, "uuid": "ced4db6e-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/RepublicOfBotv109/llm-engineering-cheatsheet/raw/refs/heads/main/byreman/llm_engineering_cheatsheet_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035828, "uuid": "cf02c434-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RepublicOfBotv109/llm-engineering-cheatsheet/refs/heads/main/byreman/llm_engineering_cheatsheet_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035887, "uuid": "f2253ecb-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-v44.veloxis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773035955, "uuid": "1a546f69-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.38.124:46853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036091, "uuid": "6b7098a3-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.42.179:45033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036136, "uuid": "86a5d298-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.75.171:37102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036199, "uuid": "ac02ebc2-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:38830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036200, "uuid": "ac8ddd1e-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.25.193:56094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036200, "uuid": "ac989b75-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.131.143:47499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036260, "uuid": "d060977f-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.131.143:47499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036315, "uuid": "f160c370-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.209:40520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036440, "uuid": "3bd4641a-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.148.109.182:34943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036500, "uuid": "5f89addf-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.219.3:59672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036668, "uuid": "c35298e5-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.94.9.187/9cca20c6df659f72/mycptpl.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036668, "uuid": "c360a21b-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.94.9.187/9cca20c6df659f72/cptchbuild.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036753, "uuid": "f5f22804-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.asdfgsdfgxcvbvcxasd-oss.top/WpsOffice_x64%20_v10_win888.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036848, "uuid": "2eb79c72-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.80.47:60605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036967, "uuid": "75b5ec52-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Admv9/repo-cheat-modpack/refs/heads/main/calculary/modpack_repo_cheat_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036967, "uuid": "75b674c1-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-sync.veloxis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "78f412f9-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "78f413f0-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/a-r.m-4.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "78f44509-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "78fa70d5-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/p-p.c-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036972, "uuid": "78fd88e3-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/m-6.8-k.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "790441d8-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "79044f13-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "7904b699-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "79050286-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "79050398-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "7907c27a-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/a-r.m-5.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036973, "uuid": "7909c1f4-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.86/a-r.m-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773036975, "uuid": "7aa97c55-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Admv9/repo-cheat-modpack/raw/refs/heads/main/calculary/modpack_repo_cheat_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037087, "uuid": "bd3db060-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wshaikh2804/Seekers-of-Tokane-Cheat-Crypto-Bot-Auto-Farm-Clicker-Game-Api-Hack/refs/heads/main/Seekers-of-Tokane-Exp/Seekers.Tests/Bot_Api_Cheat_Seekers_of_Game_Farm_Auto_Clicker_Crypto_Hack_Tokane_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037091, "uuid": "bf7ae167-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wshaikh2804/Seekers-of-Tokane-Cheat-Crypto-Bot-Auto-Farm-Clicker-Game-Api-Hack/raw/refs/heads/main/Seekers-of-Tokane-Exp/Seekers.Tests/Bot_Api_Cheat_Seekers_of_Game_Farm_Auto_Clicker_Crypto_Hack_Tokane_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037096, "uuid": "c2883616-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.168.164:44492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037210, "uuid": "068e8f21-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Toheed2004/Bloodline-mod-set-jump-height-cheat/raw/refs/heads/main/preumbonal/set_Bloodline_jump_height_cheat_mod_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037211, "uuid": "07184de2-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Toheed2004/Bloodline-mod-set-jump-height-cheat/refs/heads/main/preumbonal/set_Bloodline_jump_height_cheat_mod_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037266, "uuid": "2839d3af-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-data.veloxis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037389, "uuid": "712484f4-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shonieeee/code/raw/refs/heads/main/bytes/1024.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037390, "uuid": "71ebe79e-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shonieeee/code/refs/heads/main/bytes/1024.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037581, "uuid": "e3b3eebf-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.209:40520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037697, "uuid": "28eca47f-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:35562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037869, "uuid": "8f827e78-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ravigurjar21/PC-Fields-of-Mistria-cheats/refs/heads/main/downcast/Fields_Mistria_cheats_of_P_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037870, "uuid": "8fa9775f-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ravigurjar21/PC-Fields-of-Mistria-cheats/raw/refs/heads/main/downcast/Fields_Mistria_cheats_of_P_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037928, "uuid": "b2688ef8-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.25.193:56094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037988, "uuid": "d67bcff2-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pheap123/Blum-Crypto-Trading-Bot-P2P-Chain-Exchange-blumcrypto-Farm-Hack-Cheat-4l/raw/refs/heads/main/extinguishable/Trading-Crypto-Bot-l-Exchange-Blum-Cheat-Hack-Farm-blumcrypto-Chain-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773037991, "uuid": "d84f166c-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pheap123/Blum-Crypto-Trading-Bot-P2P-Chain-Exchange-blumcrypto-Farm-Hack-Cheat-4l/refs/heads/main/extinguishable/Trading-Crypto-Bot-l-Exchange-Blum-Cheat-Hack-Farm-blumcrypto-Chain-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038050, "uuid": "fb6317ca-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-vault.cryptixy.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038058, "uuid": "ffe39f3c-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:38830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038058, "uuid": "ffea5939-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.19:53070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038107, "uuid": "1d59f130-1b82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.148.109.182:34943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038230, "uuid": "6663e3a1-1b82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/garatagirassol/Showdown-game-hacks-weapon-upgrade/raw/refs/heads/main/whoo/weapon_game_hacks_upgrade_Showdown_v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038232, "uuid": "67a462b6-1b82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/garatagirassol/Showdown-game-hacks-weapon-upgrade/refs/heads/main/whoo/weapon_game_hacks_upgrade_Showdown_v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038321, "uuid": "9c809dc2-1b82-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.153.93:51156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773038652, "uuid": "61e30e13-1b83-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cryp-v05.cryptixy.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039077, "uuid": "5f3c383a-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.5.219:58716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039199, "uuid": "a805fc7f-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.39.34:50101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039246, "uuid": "c42395b7-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-hub.cryptixy.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039266, "uuid": "d00d3470-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.205.121:55032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039365, "uuid": "0ae0ae35-1b85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7458120104/bRgQc2J.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039630, "uuid": "a8d44065-1b85-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.80.47:60605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039918, "uuid": "54a982c2-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.19:53070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039966, "uuid": "710d8b0b-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/parroalex01/Dumper-FiveM-And-Custom-Launcher/refs/heads/main/dissever/And_Launcher_Dumper_Five_Custom_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773039966, "uuid": "7130fb38-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/parroalex01/Dumper-FiveM-And-Custom-Launcher/raw/refs/heads/main/dissever/And_Launcher_Dumper_Five_Custom_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040031, "uuid": "97d30476-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.39.34:50101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040085, "uuid": "b8733565-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/beamstar/cheatengine-mcp-bridge/raw/refs/heads/main/MCP_Server/cheatengine_bridge_mcp_3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040091, "uuid": "bbb8a7a9-1b86-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/beamstar/cheatengine-mcp-bridge/refs/heads/main/MCP_Server/cheatengine_bridge_mcp_3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040267, "uuid": "24e9cd17-1b87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cryp-node.cryptixy.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040275, "uuid": "29648a63-1b87-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.6.166:36273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040811, "uuid": "68a6885f-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-peak.solarisx.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040867, "uuid": "8a1b4488-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jowafanene123-cmyk/mcp-accessibility-bridge/refs/heads/main/examples/playwright-github-tests/tests/mcp-accessibility-bridge-v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040867, "uuid": "8a2f8ab2-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/evilgrou-tech/drive/refs/heads/main/run_forex.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040869, "uuid": "8bbd4101-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jowafanene123-cmyk/mcp-accessibility-bridge/raw/refs/heads/main/examples/playwright-github-tests/tests/mcp-accessibility-bridge-v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040871, "uuid": "8cd72f72-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.5.219:58716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040874, "uuid": "8e66a5ca-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pngup.com/zAiY/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040878, "uuid": "90ff6350-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/evilgrou-tech/drive/raw/refs/heads/main/OneDriveSetup.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040990, "uuid": "d3af56eb-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Itzzwojx/claude-telegram-relay/refs/heads/master/daemon/relay_telegram_claude_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773040991, "uuid": "d3ffff04-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Itzzwojx/claude-telegram-relay/raw/refs/heads/master/daemon/relay_telegram_claude_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041166, "uuid": "3c727b80-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hari11v/20-God-Tier-AI-Coding-Extensions-Part-1/refs/heads/main/discipular/Coding-Extensions-Part-A-Tier-God-v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041166, "uuid": "3cbff96a-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hari11v/20-God-Tier-AI-Coding-Extensions-Part-1/raw/refs/heads/main/discipular/Coding-Extensions-Part-A-Tier-God-v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041226, "uuid": "601899d4-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Betinhocapoeira/mcp-bsl-lsp-bridge/refs/heads/main/directories/mcp-bsl-lsp-bridge-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041226, "uuid": "60319814-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Betinhocapoeira/mcp-bsl-lsp-bridge/raw/refs/heads/main/directories/mcp-bsl-lsp-bridge-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041226, "uuid": "60853835-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://web3-walletnotify.cc", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041227, "uuid": "60c78784-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://communicationfirewall-security.cc/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041286, "uuid": "844a6c3c-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/VaibhavDhopte/claudecode-telegram/refs/heads/main/hooks/claudecode-telegram-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041291, "uuid": "8717330d-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/VaibhavDhopte/claudecode-telegram/raw/refs/heads/main/hooks/claudecode-telegram-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041409, "uuid": "cd5cc025-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/SWIT2025/context-bridge-mcp/raw/refs/heads/main/src/context_bridge_mcp_v3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041413, "uuid": "cfaa0758-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/SWIT2025/context-bridge-mcp/main/src/context_bridge_mcp_v3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041468, "uuid": "f0b58bbd-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tkboys123/whatsapp-bridge-mcp/refs/heads/master/bridge/whatsapp_mcp_bridge_washhouse.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041470, "uuid": "f1ee83cc-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tkboys123/whatsapp-bridge-mcp/raw/refs/heads/master/bridge/whatsapp_mcp_bridge_washhouse.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041589, "uuid": "3885854f-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Racersaravanaa/temple-bridge/raw/refs/heads/main/src/temple_bridge_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041591, "uuid": "39e4d44e-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Racersaravanaa/temple-bridge/refs/heads/main/src/temple_bridge_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041596, "uuid": "3c9a295a-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.168.164:44492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041597, "uuid": "3d31ae56-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.63.164:60576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041649, "uuid": "5c254486-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/boat077/mail-mcp-bridge/refs/heads/main/imprestable/mail-mcp-bridge-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041650, "uuid": "5d3ddf6d-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/boat077/mail-mcp-bridge/raw/refs/heads/main/imprestable/mail-mcp-bridge-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041651, "uuid": "5d729c60-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-v6.solarisx.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041768, "uuid": "a37247f5-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/alyamani18/mcp-agent-bridge/raw/refs/heads/main/config/mcp_agent_bridge_encyclopedial.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041772, "uuid": "a5dcbdd1-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/alyamani18/mcp-agent-bridge/refs/heads/main/config/mcp_agent_bridge_encyclopedial.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041946, "uuid": "0da81e82-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jonat-han-tech/ddc-ci-control-bridge/refs/heads/main/bin/ci_ddc_bridge_control_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773041949, "uuid": "0f721ba6-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jonat-han-tech/ddc-ci-control-bridge/raw/refs/heads/main/bin/ci_ddc_bridge_control_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042009, "uuid": "3306874e-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Heaven323555/typescript-sdk/refs/heads/main/src/typescript-sdk-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042009, "uuid": "333696bb-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Heaven323555/typescript-sdk/raw/refs/heads/main/src/typescript-sdk-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042251, "uuid": "c354305c-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-sys.solarisx.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042257, "uuid": "c6a4293d-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:33730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042381, "uuid": "10c951d5-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.209.161:42124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042570, "uuid": "81a501c4-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:38903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042668, "uuid": "bba4cb22-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ddandjohnnyfilms/ftp-client/refs/heads/main/ehex.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042668, "uuid": "bbfab232-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ddandjohnnyfilms/ftp-client/raw/refs/heads/main/size.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042672, "uuid": "be6c0bc9-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ddandjohnnyfilms/ftp-client/refs/heads/main/size.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042673, "uuid": "beca84dd-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ddandjohnnyfilms/ftp-client/raw/refs/heads/main/ehex.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773042743, "uuid": "e88950f6-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.177:60859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043029, "uuid": "932e7783-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-base.solarisx.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043207, "uuid": "fd56dbbe-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://debank-api.cc/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043214, "uuid": "013f2338-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://updateservice1-telegramweb.com/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043214, "uuid": "014a869e-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://s3-python.cc/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043214, "uuid": "015025b4-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://magnusworkspace.com/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043214, "uuid": "015c6ef5-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigbrainsholdings.com/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043214, "uuid": "0168034e-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://web3-walletnotify.cc/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043216, "uuid": "02af3fd0-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://s1-rarlab.com/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043217, "uuid": "03106204-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-py-store.com/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043217, "uuid": "032f00cb-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://py-installer.cc/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043398, "uuid": "6ed3b49f-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.111.237:36675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043579, "uuid": "daf2de82-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.186.91:39005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043751, "uuid": "4112f944-1b8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-node.terravia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043835, "uuid": "735ae334-1b8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.118.136:39679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773043885, "uuid": "9144f512-1b8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.186.91:39005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044066, "uuid": "fd40bafb-1b8f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:33730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044291, "uuid": "8367f512-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://terr-v77.terravia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044300, "uuid": "88a777f7-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.30.5:44846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044300, "uuid": "88a78072-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.209.161:42124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044372, "uuid": "b3529ece-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.177:60859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044372, "uuid": "b3b2f5a4-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:54187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044416, "uuid": "cda1dc0d-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-net.terravia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044669, "uuid": "6465d999-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:38903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044771, "uuid": "a1747928-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ovbfopy8.bitterfisherm.digital/?=check&&actmn=BirNHnJSRGbCbtqZ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044799, "uuid": "b1fc67ee-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.30.5:44846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773044856, "uuid": "d3efb130-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://terr-run.terravia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045068, "uuid": "522701d9-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-way.niventa.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045131, "uuid": "7822acf2-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7782139129/cLLcO4g.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045151, "uuid": "83f5582d-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.220:54462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045205, "uuid": "a41c0f4b-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/exapikemanupgrade83/world-of-tanks-external/releases/download/new/WOT-Cheat-5.2.2-Win64.rar", "Tag": [ { "name": "pw-2201", "colour": "#360366", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045253, "uuid": "c047c4cf-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/CAMUNLOCK/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045258, "uuid": "c37213eb-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CAMUNLOCK/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045367, "uuid": "04cc11db-1b93-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://niv-v08.niventa.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045506, "uuid": "577e4eeb-1b93-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.217.39:49370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045676, "uuid": "bcec5135-1b93-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-sync.niventa.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773045968, "uuid": "6a7ae563-1b94-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://niv-flow.niventa.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046168, "uuid": "e1d2eb3f-1b94-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:37452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046269, "uuid": "1dff566b-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-logic.astronis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046476, "uuid": "999507e7-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.220:54462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046634, "uuid": "f7ddbdb1-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://astro-v09.astronis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046651, "uuid": "0198fae7-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.208.95:40917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046812, "uuid": "61f1b18a-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-gate.astronis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046985, "uuid": "c8e93110-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/cron.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046986, "uuid": "c97e764e-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/for", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773046990, "uuid": "cbdf3049-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://astro-unit.astronis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047000, "uuid": "d1b11dde-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/p", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047000, "uuid": "d1c52252-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.153.140.16/busybox", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047353, "uuid": "a446d7dc-1b97-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-ref.moxura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047593, "uuid": "33031877-1b98-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mox-v11.moxura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047848, "uuid": "cb747633-1b98-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:37452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047889, "uuid": "e371ae35-1b98-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-base.moxura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773047960, "uuid": "0dd0469c-1b99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.142.132:41670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048092, "uuid": "5cbe312b-1b99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.131:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048328, "uuid": "e96f82bf-1b99-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.225:54327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048386, "uuid": "0c2ce7ba-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.47:42521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048436, "uuid": "299f93b0-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://transfer.weepee.io/7nZw7/blue.drx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "CVE-2026-1731", "colour": "#6dbe0d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048494, "uuid": "4c157a4f-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mox-net.moxura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048498, "uuid": "4e7e32c2-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://transfer.weepee.io/MvSx6/super.drx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "CVE-2026-1731", "colour": "#6dbe0d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773048815, "uuid": "0b72e437-1b9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://transfer.weepee.io/139H8d/ldx", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "CVE-2026-1731", "colour": "#6dbe0d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773049101, "uuid": "b64ac423-1b9b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.224.92:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773049697, "uuid": "1952ff3a-1b9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.47:42521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773049928, "uuid": "a33b90ba-1b9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-moral.askloop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773050058, "uuid": "f0a07eb4-1b9d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.224.92:60301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773050109, "uuid": "0f3faeae-1b9e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-fluxor.askloop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773050528, "uuid": "08ffe1d7-1b9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://jfjoj.askloop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773050831, "uuid": "bd45326e-1b9f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://carrierstream.toolbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051131, "uuid": "70699311-1ba0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prrnftoa.toolbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051140, "uuid": "757670e5-1ba0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.154:41988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051319, "uuid": "e009851e-1ba0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.163.68.86:10317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051426, "uuid": "1fbad721-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guardtrans.toolbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051613, "uuid": "8f6e9260-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.106:37892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051676, "uuid": "b4d46978-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.82.131:35331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051728, "uuid": "d4369fee-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://reel-mount.toolbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051738, "uuid": "d9b79b86-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.82.131:35331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773051852, "uuid": "1da44fc2-1ba2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.0.60.80:53897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773052045, "uuid": "911b25d8-1ba2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.177.138:44681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773052146, "uuid": "cd39110a-1ba2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oute2-grid.blackford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773052209, "uuid": "f2c412cc-1ba2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.225:54327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773052569, "uuid": "c9651f04-1ba3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mossoak.blackford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773052929, "uuid": "a00a36ba-1ba4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ago-plate.blackford.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053061, "uuid": "ee6d3234-1ba4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.41.227:44480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053122, "uuid": "1292469f-1ba5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.0.60.80:53897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053229, "uuid": "52b64087-1ba5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyrfnqqh.fullgate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053292, "uuid": "7864504f-1ba5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.106:37892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053529, "uuid": "052b20ef-1ba6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://queuemarsh.fullgate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053550, "uuid": "11d13ccb-1ba6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.134:60116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053588, "uuid": "289a5dff-1ba6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:35562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773053834, "uuid": "bb5f2275-1ba6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.177.138:44681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773054127, "uuid": "69ba7c02-1ba7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.36:42855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773054550, "uuid": "66319cd7-1ba8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gaydkonx.fullgate.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773054616, "uuid": "8da18e63-1ba8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.134:60116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773055568, "uuid": "c5061cff-1baa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://b74nufw.rollbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773055870, "uuid": "78fdd2f6-1bab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://velline5en.rollbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773056287, "uuid": "7151b3a7-1bac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-gu1de.rollbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773056360, "uuid": "9caba6db-1bac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:32899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773056596, "uuid": "2951af07-1bad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.41.227:44480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773056714, "uuid": "6fbd358d-1bad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://valu-crest.spinpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773056773, "uuid": "933a7c87-1bad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:43900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057008, "uuid": "1f37655e-1bae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7942715918/otRD45B.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057376, "uuid": "fa4d0084-1bae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:43900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057377, "uuid": "fae93135-1bae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.137.159:49505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057553, "uuid": "641a60c0-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.156.145:51564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057608, "uuid": "84e062d0-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorlithix3.spinpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057677, "uuid": "ad910350-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.154:41988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773057798, "uuid": "f61fbaa1-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.7.71:55396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058092, "uuid": "a57ac571-1bb0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://repairdefend.spinpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058220, "uuid": "f1c7a44a-1bb0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.90.123.164:33064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058513, "uuid": "a00cd059-1bb1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stri5-reach.spinpath.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058576, "uuid": "c5ddff26-1bb1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.181.224:56641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058690, "uuid": "0964bd54-1bb2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.6.181:46328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058748, "uuid": "2c1719a1-1bb2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7903503838/kUpExhy.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058810, "uuid": "50e168ac-1bb2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:47745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773058933, "uuid": "9a6829d0-1bb2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://r3nder-switch.windright.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059048, "uuid": "df308a10-1bb2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.156.145:51564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059354, "uuid": "95203f2b-1bb3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lknz.windright.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059358, "uuid": "97d05ec1-1bb3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.137.159:49505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059477, "uuid": "de84253a-1bb3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:47745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059771, "uuid": "8dbbdae6-1bb4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://6h76gr0n.diagnosfirst.digital/?=check&&actmn=PQGIVLyIagdgLkgG", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059829, "uuid": "b0a67fb5-1bb4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:32899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059835, "uuid": "b3d5303b-1bb4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cocinanikkei.com.pe/img_094738.png", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773059837, "uuid": "b5392cc5-1bb4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pngup.com/rv2N/optimized_MSI.png", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773060043, "uuid": "3031077c-1bb5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.7.71:55396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773060045, "uuid": "310fafa8-1bb5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://unload-bridge.windright.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773060131, "uuid": "64af28ec-1bb5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://letcurre.windright.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773060376, "uuid": "f64f29b3-1bb5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.6.181:46328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061086, "uuid": "9d904879-1bb7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.136.196/tcDvNyMIVEautDnohjSyS139.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061087, "uuid": "9e975980-1bb7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.136.196/GhLOHHKDpUMwZf161.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061098, "uuid": "a534dc45-1bb7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.120.63:47826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061296, "uuid": "1b028b02-1bb8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.155.117:49840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061345, "uuid": "3869eb5d-1bb8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.107.56:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061646, "uuid": "eb768aec-1bb8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.238.30:48410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773061818, "uuid": "521d5149-1bb9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:37139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062060, "uuid": "e226e1ac-1bb9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.19.106:60875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062178, "uuid": "2894094f-1bba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmgrim.slowbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062471, "uuid": "d7815dc1-1bba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://s0lid-leaf.slowbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062535, "uuid": "fd58b636-1bba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.19.106:60875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062589, "uuid": "1db1f024-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.224.92/cache.bin", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062713, "uuid": "676145c6-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.228:46401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062892, "uuid": "d245ea94-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iqdrq.slowbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773062897, "uuid": "d4ea4d6b-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.155.117:49840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063246, "uuid": "a5438d63-1bbc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8290342669/SBD1ils.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063315, "uuid": "ce5d7807-1bbc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.207.23:37555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063431, "uuid": "13957b6e-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://columnreel.slowbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063732, "uuid": "c701763c-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prim-node.veritax.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063746, "uuid": "cf74cc6e-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.241.219.55:9000/peer.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063847, "uuid": "0babd114-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.80.11.103:2222/loader1.bin", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773063909, "uuid": "301b9fd0-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.97:5553/freks.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064086, "uuid": "99ec9587-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://veri-v01.veritax.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064097, "uuid": "a06bc2ea-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.228:46401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064211, "uuid": "e4664f04-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://xf221.cn/cs12.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064329, "uuid": "2afb5afd-1bbf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prim-sync.veritax.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064572, "uuid": "bb82649c-1bbf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://veri-base.veritax.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064865, "uuid": "6a81fbce-1bc0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8290342669/SBD1ils.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064878, "uuid": "71ceafde-1bc0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.207.23:37555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773064927, "uuid": "8f1cd836-1bc0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dunigghhh/Hii/refs/heads/main/asd.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065118, "uuid": "014267ac-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dunigghhh/Hii/refs/heads/main/server.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065177, "uuid": "2414f8ce-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastes.io/raw/0QC9JNhs", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065287, "uuid": "65d6af18-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-hub.kronosis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065473, "uuid": "d4e2299c-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kron-v12.kronosis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065768, "uuid": "84a35f19-1bc2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-net.kronosis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065829, "uuid": "a894e814-1bc2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7782139129/EK789KM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773065841, "uuid": "b02b10f0-1bc2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:47257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066014, "uuid": "16d06bfc-1bc3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kron-flow.kronosis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066379, "uuid": "f09ebf8e-1bc3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.182.242/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066429, "uuid": "0e38039a-1bc4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ops-gate.dynastis.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773066730, "uuid": "c1d4734b-1bc4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyna-v3.dynastis.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067208, "uuid": "def800ec-1bc5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ops-unit.dynastis.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067326, "uuid": "24dee180-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://8r6d1s3j.cheesechubary.digital/?=check&&actmn=GqFQTOxXmlHLfmLo", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067347, "uuid": "31853d1e-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:47257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067387, "uuid": "495440d8-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyna-edge.dynastis.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067527, "uuid": "9cd30949-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:53594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067579, "uuid": "bbe369c4-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:50872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067747, "uuid": "2017e719-1bc7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-core.nexulon.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067773, "uuid": "2f6f542c-1bc7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.222.244:41389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773067987, "uuid": "aecf8382-1bc7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nexu-v44.nexulon.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068126, "uuid": "023345b7-1bc8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.149.131:39767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068267, "uuid": "55cd3f04-1bc8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfrc.ckmo.live/Cyrex.zip", "Tag": [ { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068287, "uuid": "6212f297-1bc8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dist-sync.nexulon.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068541, "uuid": "f941dfde-1bc8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:50872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068712, "uuid": "5eebda4d-1bc9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://nexu-data.nexulon.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068785, "uuid": "8a91ee33-1bc9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:53594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773068953, "uuid": "eebdb949-1bc9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-vault.zentalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069011, "uuid": "11a30acf-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.121.203:47275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069145, "uuid": "61752a65-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.131.103:46863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069197, "uuid": "8056759b-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7093422244/JHvHyiz.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069373, "uuid": "e8ebc4f6-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zent-v05.zentalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069499, "uuid": "34606c69-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.89.238.200/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069569, "uuid": "5dfc7721-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.222.244:41389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069670, "uuid": "9a6f8115-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-hub.zentalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773069792, "uuid": "e3163356-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cocinanikkei.com.pe/img_085359.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070076, "uuid": "8bef3644-1bcc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.142.132:41670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070154, "uuid": "ba844582-1bcc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zent-node.zentalis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070451, "uuid": "6bebaff9-1bcd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-peak.orbisura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070524, "uuid": "973b4b19-1bcd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.131.103:46863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773070753, "uuid": "1fd7cb77-1bce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbi-v6.orbisura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071054, "uuid": "d2fc38c3-1bce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://qpgroup.top/uploads/Coral_Setup.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071168, "uuid": "1710b539-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-sys.orbisura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071182, "uuid": "1f26b117-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.203:37155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071467, "uuid": "c927306d-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbi-base.orbisura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071485, "uuid": "d42b73fa-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.95.105:43878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071775, "uuid": "812b3c02-1bd0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.23:39006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773071832, "uuid": "a31f97cd-1bd0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-node.fluxoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072127, "uuid": "52eaaf2c-1bd1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7782139129/fYf2bHV.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072252, "uuid": "9d016444-1bd1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-v77.fluxoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072499, "uuid": "30b8ae5e-1bd2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.203:37155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072564, "uuid": "571f012d-1bd2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.23:39006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072667, "uuid": "945d2d1a-1bd2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-net.fluxoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072967, "uuid": "477fd7da-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-run.fluxoris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773072979, "uuid": "4e646ade-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.38.201:41198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773073029, "uuid": "6c1a36d5-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://marsalek.cy/static/plugin3.plg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773073221, "uuid": "deb7a8c3-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.92.7:49382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773073332, "uuid": "21212aae-1bd4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-way.vibrante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773073750, "uuid": "1a2bd335-1bd5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vibr-v08.vibrante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773074051, "uuid": "cd9aa66e-1bd5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-sync.vibrante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773074406, "uuid": "a14ef974-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vibr-flow.vibrante.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773074423, "uuid": "aafd24f2-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.111:34226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773074476, "uuid": "ca9f720c-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.95.105:43878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773074528, "uuid": "e9865224-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-logic.spectris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773074827, "uuid": "9bd2685d-1bd7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spec-v09.spectris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773075128, "uuid": "4f60a9c8-1bd8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-gate.spectris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773075490, "uuid": "2701e16a-1bd9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8538310255/aoT9QRm.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773075607, "uuid": "6cfcc1bd-1bd9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spec-unit.spectris.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773075848, "uuid": "fcdab26d-1bd9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-ref.quintura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076212, "uuid": "d590f84f-1bda-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quin-v11.quintura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076388, "uuid": "3e2d82f9-1bdb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-base.quintura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076693, "uuid": "f44f0aae-1bdb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.231.227:47814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076772, "uuid": "235a6164-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.2.39:42339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076807, "uuid": "37fd88b8-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quin-net.quintura.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076925, "uuid": "7e5b1e58-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.59.119.161/download/gitlol", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076931, "uuid": "823cec99-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.76.79:57271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773076992, "uuid": "a65e147a-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://transmfield.wayton.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773077000, "uuid": "ab3537b6-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.68.239:55385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773077232, "uuid": "35b78996-1bdd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:33331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773077292, "uuid": "5901917c-1bdd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://faitdem.wayton.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773077591, "uuid": "0b399ece-1bde-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://render5-line.wayton.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078021, "uuid": "0b9ef130-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.231.227:47814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078021, "uuid": "0bb8bb0c-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.2.39:42339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078079, "uuid": "2e39a225-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.76.224.175:37151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078187, "uuid": "6ecd0583-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://guid-route.greentea.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078197, "uuid": "74fa4d1d-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.157.227:60882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078380, "uuid": "e19bc847-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.76.79:57271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078427, "uuid": "fe1640ca-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://deal1-point.greentea.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078500, "uuid": "29420b7f-1be0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.241.103:43347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078614, "uuid": "6d2e49ef-1be0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:55475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078732, "uuid": "b3ddb8bd-1be0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:33331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078794, "uuid": "d8441b10-1be0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.92.55:56852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773078919, "uuid": "22cfc98b-1be1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:59756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773079269, "uuid": "f3a0203a-1be1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8538310255/Ouxs217.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773079327, "uuid": "16698534-1be2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/825476364/6HMd4Pg.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773079331, "uuid": "188fce5f-1be2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:55475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773079578, "uuid": "abf64c4d-1be2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.76.224.175:37151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773079687, "uuid": "ed1ac18c-1be2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://reel-tok.costfee.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773079882, "uuid": "61445652-1be3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.215.242:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773081128, "uuid": "47720cfb-1be6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-shi.droplast.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773081197, "uuid": "712326cb-1be6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.92.55:56852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773081312, "uuid": "b5922f7a-1be6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://eaec4m.droplast.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082219, "uuid": "d215d9cd-1be8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:59756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082331, "uuid": "14960295-1be9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sp4rrow-phase.lookback.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082519, "uuid": "84e62edc-1be9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.184.136:35437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082634, "uuid": "c98947b3-1be9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.247.209:33395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082749, "uuid": "0dc0b512-1bea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1tr5-bridge.lookback.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082820, "uuid": "38113a2d-1bea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.200:59050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773082933, "uuid": "7bafa878-1bea-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ch3c-line.bestink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773083832, "uuid": "93a282f3-1bec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://syncryp.bestink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773084315, "uuid": "b375b809-1bed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:32776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773084366, "uuid": "d1fdcd59-1bed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cent-v01.centurionix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773084550, "uuid": "3f3f6aee-1bee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://syst-sync.centurionix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773084858, "uuid": "f6d73833-1bee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.114.170:47422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773085395, "uuid": "36c4abd3-1bf0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://infra-hub.altimetrica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773085570, "uuid": "9f86b7e4-1bf0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.114.170:47422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773085816, "uuid": "31f948cd-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.101:54757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773085938, "uuid": "7aae7768-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:32776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773085999, "uuid": "9f5c20e5-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.68.162.210:44616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773086116, "uuid": "e51262df-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alti-v12.altimetrica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773086709, "uuid": "4611621f-1bf3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://infra-net.altimetrica.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773086777, "uuid": "6f0d7a0d-1bf3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.228.2:58095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087014, "uuid": "fc485c02-1bf3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-gate.quantovault.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087265, "uuid": "9188e88b-1bf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.101:54757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087376, "uuid": "d41cf3da-1bf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.68.162.210:44616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087377, "uuid": "d4b700b6-1bf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.54:56748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087427, "uuid": "f282602f-1bf4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-unit.quantovault.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087624, "uuid": "67e821ea-1bf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.94.182:40928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087672, "uuid": "842cdc53-1bf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://quan-edge.quantovault.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087680, "uuid": "8927c659-1bf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.184.136:35437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087788, "uuid": "c9b19832-1bf5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.162/sodal", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087932, "uuid": "1f6bfba1-1bf6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-core.primordialis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773087936, "uuid": "2192e0c2-1bf6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.196.87:46096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773088267, "uuid": "e6f5781b-1bf6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prim-v44.primordialis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773088511, "uuid": "7855627a-1bf7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.196.87:46096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773088762, "uuid": "0dd29929-1bf8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.54:56748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773088933, "uuid": "73f5a655-1bf8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://prim-data.primordialis.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089415, "uuid": "92f02961-1bf9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vult-vault.spectrometric.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089431, "uuid": "9ce743ed-1bf9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.245.10:52312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089899, "uuid": "b36f05b4-1bfa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.211.252:56232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773089957, "uuid": "d6388af8-1bfa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0fjv96k.demogsystemat.digital/?=check&&actmn=GMXBhVrdBSaIoizJ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773090016, "uuid": "f928d646-1bfa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spec-v05.spectrometric.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773090439, "uuid": "f542169c-1bfb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.73.84:58002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773090557, "uuid": "3b90aa74-1bfc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spec-node.spectrometric.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091095, "uuid": "7cb3ab23-1bfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.207.29:55511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091155, "uuid": "a008ad45-1bfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://obsi-v6.obsidianix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091164, "uuid": "a561a2db-1bfd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.92.243:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091469, "uuid": "5b2cf9aa-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.191.72.235:35371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091519, "uuid": "78fb2e6f-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-sys.obsidianix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091644, "uuid": "c3945a60-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.199.175:59521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091650, "uuid": "c75f3037-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.228.249.54:59970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773091650, "uuid": "c78b0690-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.228.249.54:59970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773092113, "uuid": "db21f895-1bff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://obsi-base.obsidianix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773092592, "uuid": "f8e627c4-1c00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-way.vibratronic.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773092836, "uuid": "8a4db992-1c01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.217.39:49370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773092837, "uuid": "8ae5159e-1c01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.7.105:46866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773092888, "uuid": "a92971d2-1c01-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.92.243:44162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773093140, "uuid": "3f95ad15-1c02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.126.163:54070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773093379, "uuid": "cde9e287-1c02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.73.84:58002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773093501, "uuid": "1655404d-1c03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.130:56856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773093849, "uuid": "e5bc8a24-1c03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vibr-flow.vibratronic.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773093980, "uuid": "34389dd7-1c04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.130:56856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094218, "uuid": "c1fedcf4-1c04-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.131.33:46649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094327, "uuid": "02cc5115-1c05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-v09.synchromesh.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094568, "uuid": "92543fc8-1c05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-gate.synchromesh.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094640, "uuid": "bd6391ff-1c05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.136.85.111:43610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094867, "uuid": "4514cd34-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-unit.synchromesh.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094988, "uuid": "8cd35d4d-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-ref.galactoview.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773094996, "uuid": "91fe5eb2-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.7.105:46866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095176, "uuid": "fd38ab64-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.207.29:55511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095177, "uuid": "fd9b8581-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.4.146:48357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095226, "uuid": "1abf467d-1c07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gala-v11.galactoview.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095290, "uuid": "40eff6c9-1c07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.252.46:35776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095778, "uuid": "63bff93f-1c08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.131.33:46649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095895, "uuid": "a9cb5f6f-1c08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.209.204:43462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773095953, "uuid": "cc310155-1c08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:46135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773096131, "uuid": "360603c1-1c09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.187.41:47660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773096369, "uuid": "c447cf07-1c09-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tech-base.galactoview.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773096610, "uuid": "53a0d414-1c0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gala-net.galactoview.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773096739, "uuid": "a084af1c-1c0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.252.46:35776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773096909, "uuid": "05bff195-1c0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-node.structovista.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773096976, "uuid": "2dc62e29-1c0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.42.54:58121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773097388, "uuid": "23a9ad8f-1c0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stru-v77.structovista.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773097568, "uuid": "8ebedd36-1c0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.42.54:58121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773097686, "uuid": "d559eb2a-1c0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-net.structovista.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773097699, "uuid": "dcfec712-1c0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.187.41:47660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773097812, "uuid": "1ffe7341-1c0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:35458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773097987, "uuid": "88618cc2-1c0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stru-run.structovista.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098286, "uuid": "3ad15dd7-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://syst-node.centurionix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098527, "uuid": "caa08bf9-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/tr064", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098528, "uuid": "caac86bd-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/wget.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098528, "uuid": "caac897c-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/w.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccb17da8-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccdd32f2-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccebff79-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccec3e40-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccf1c963-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccf37aa9-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccf77af2-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccfa06f0-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccfced61-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098531, "uuid": "ccfcf9bb-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098532, "uuid": "cd259bcb-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773098547, "uuid": "d6644885-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.25.158.78/bins/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773099967, "uuid": "24cc941c-1c12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cent-base.centurionix.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063306, "uuid": "c8b481ab-1bbc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.206.207.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773032465, "uuid": "fa517c24-1b74-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.78.159.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773078065, "uuid": "25c459e4-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.76.224.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773038285, "uuid": "87547135-1b82-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.153.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041584, "uuid": "35e91c00-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.249.63.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043566, "uuid": "d2f7ef30-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.186.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773096126, "uuid": "32f4fd45-1c09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.187.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773029465, "uuid": "fdf41e6e-1b6d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.38.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773019925, "uuid": "c79953a6-1b57-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.117.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025807, "uuid": "7996f103-1b65-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.201.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087365, "uuid": "cd20f223-1bf4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.25.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773062705, "uuid": "62f13505-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.65.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773052024, "uuid": "8489895f-1ba2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.177.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076985, "uuid": "a269763a-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.68.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020884, "uuid": "039d5da6-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.199.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773084844, "uuid": "eee404e1-1bee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.114.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025085, "uuid": "cbbaaa93-1b63-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.255.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071765, "uuid": "7af2cd76-1bd0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.158.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773078785, "uuid": "d37bf907-1be0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.92.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773095285, "uuid": "3ddde909-1c07-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.252.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076685, "uuid": "ef85566b-1bdb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.231.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773051664, "uuid": "adc987a7-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.82.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036426, "uuid": "32ffadcb-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.148.109.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773085984, "uuid": "963b4ec4-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.68.162.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773091147, "uuid": "9baed686-1bfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.92.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087607, "uuid": "5d826a49-1bf5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.94.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046624, "uuid": "f1ea541d-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.208.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023106, "uuid": "2fc83608-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.129.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071465, "uuid": "c7f09f6f-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.95.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022505, "uuid": "c998a204-1b5d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.255.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773039064, "uuid": "57ce6998-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.5.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773079866, "uuid": "57a8bb9f-1be3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.215.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071166, "uuid": "15ba3165-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.240.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033006, "uuid": "3c95aaaf-1b76-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.199.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773061265, "uuid": "0832b573-1bb8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.155.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773033485, "uuid": "5a4156f8-1b77-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.136.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082625, "uuid": "c3be5ce8-1be9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.247.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036185, "uuid": "a3c73b5a-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.25.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773092825, "uuid": "83f2dc97-1c01-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.7.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773062045, "uuid": "d95dc076-1bb9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.19.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023586, "uuid": "4dcec1bd-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.34.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021184, "uuid": "b6271d8c-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.9.241.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773098525, "uuid": "c92c8d97-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.25.158.78", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036666, "uuid": "c2323e08-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.94.9.187", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773073207, "uuid": "d6a10c82-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.92.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773091085, "uuid": "76b0fbb8-1bfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.207.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087928, "uuid": "1cded4e2-1bf6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.196.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016565, "uuid": "f52aeef2-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.35.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773085806, "uuid": "2bf51c6c-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.51.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045486, "uuid": "4b3ccc47-1b93-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.217.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773096965, "uuid": "27228b95-1c0b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.42.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090425, "uuid": "ed376883-1bfb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.73.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773017285, "uuid": "a26399c5-1b51-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.160.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036845, "uuid": "2d16d2a8-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.80.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042725, "uuid": "ddd0b78b-1b8c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.108.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037085, "uuid": "bc2ba898-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.168.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773095164, "uuid": "f5f8f66a-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.4.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773091448, "uuid": "4eede756-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.191.72.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773058206, "uuid": "e904a4d2-1bb0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.90.123.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773062585, "uuid": "1b1e5f65-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.224.92", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063725, "uuid": "c2b5ac84-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.241.219.55", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773061085, "uuid": "9cf8e52a-1bb7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.136.196", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773052927, "uuid": "9ea87009-1ba4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ago-plate.blackford.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045124, "uuid": "73979b80-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.175.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036185, "uuid": "a3c76237-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.131.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773057783, "uuid": "ed12a610-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.7.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773049085, "uuid": "ac985202-1b9b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.224.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022625, "uuid": "110eb00a-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.101.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773094207, "uuid": "bb7e453c-1c04-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.131.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773015484, "uuid": "70f24341-1b4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.46.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773057544, "uuid": "5e9da26a-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.156.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773053524, "uuid": "02b9a681-1ba6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.214.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035944, "uuid": "142fa14f-1b7d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.38.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048305, "uuid": "dbd93b2f-1b99-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.55.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069125, "uuid": "553e4dde-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.131.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035286, "uuid": "8b79d89c-1b7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.121.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016806, "uuid": "84fbe6e9-1b50-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.31.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773039245, "uuid": "c33df353-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.205.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773093484, "uuid": "0cb2a9b4-1c03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.65.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076744, "uuid": "12f151f9-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.2.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016445, "uuid": "ad71271f-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.152.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773053045, "uuid": "e4fe26d7-1ba4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.41.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066366, "uuid": "e8da8067-1bc3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.131.182.242", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076924, "uuid": "7e265864-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.59.119.161", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063844, "uuid": "09774913-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.80.11.103", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773061324, "uuid": "2bd83e7c-1bb8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.107.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020406, "uuid": "e66f87f2-1b58-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.114.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773078485, "uuid": "2078befe-1be0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.241.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773093124, "uuid": "35c3ef8b-1c02-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.126.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026824, "uuid": "d806cfc1-1b67-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.17.158.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773034924, "uuid": "b40c5b92-1b7a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.219.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773094624, "uuid": "b43b50e8-1c05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.136.85.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773057365, "uuid": "f40c0af7-1bae-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.168.137.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026106, "uuid": "2c53dfcd-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773018007, "uuid": "5078e890-1b53-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.38.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773032525, "uuid": "1e544f11-1b75-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.58.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773074405, "uuid": "a07a3231-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.133.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773029765, "uuid": "b0dd653d-1b6e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.149.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773032165, "uuid": "47640bd0-1b74-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.93.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059770, "uuid": "8d737e55-1bb4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "6h76gr0n.diagnosfirst.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069485, "uuid": "2c15aa10-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.89.238.200", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773091639, "uuid": "c0c0023d-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.228.249.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067325, "uuid": "249e41a5-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "8r6d1s3j.cheesechubary.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065285, "uuid": "64d80f63-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-hub.kronosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773020406, "uuid": "e68452a7-1b58-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-hub.zenithra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065766, "uuid": "838ce08b-1bc2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-net.kronosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773022744, "uuid": "5844edb9-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-net.zenithra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773086112, "uuid": "e233b703-1bf1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alti-v12.altimetrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046989, "uuid": "cb02362d-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "astro-unit.astronis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046630, "uuid": "f53d9d81-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "astro-v09.astronis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773055566, "uuid": "c3634de1-1baa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "b74nufw.rollbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773017644, "uuid": "7894b16f-1b52-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-base.oakbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016329, "uuid": "68874866-1b4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-ref.oakbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043210, "uuid": "fe9b3b88-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigbrainsholdings.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773039245, "uuid": "c3525c10-1b84-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-hub.cryptixy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069666, "uuid": "98092ab0-1bcb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-hub.zentalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773038048, "uuid": "fa0dd220-1b81-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-vault.cryptixy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773068946, "uuid": "ea7316b0-1bc9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-vault.zentalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773050829, "uuid": "bc3e6630-1b9f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "carrierstream.toolbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773099965, "uuid": "234ac207-1c12-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cent-base.centurionix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773084365, "uuid": "d114da8f-1bed-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cent-v01.centurionix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082931, "uuid": "7a43c036-1bea-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ch3c-line.bestink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773015305, "uuid": "06493e30-1b4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "clay-gate.redclay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773014708, "uuid": "a25de92a-1b4b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "clay-logic.redclay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063424, "uuid": "0f565394-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "columnreel.slowbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041226, "uuid": "606694ae-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "communicationfirewall-security.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040266, "uuid": "240d9bf7-1b87-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryp-node.cryptixy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773038647, "uuid": "5f1f030e-1b83-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryp-v05.cryptixy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773081126, "uuid": "46945da2-1be6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-shi.droplast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087007, "uuid": "f807f9b4-1bf3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-gate.quantovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087425, "uuid": "f153ffcf-1bf4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-unit.quantovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773078425, "uuid": "fcbce528-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "deal1-point.greentea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043207, "uuid": "fd4510f3-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "debank-api.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773049926, "uuid": "a1ff3fc2-1b9d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev-moral.askloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067746, "uuid": "1f420098-1bc7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-core.nexulon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773026108, "uuid": "2d8a196e-1b66-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-core.veloxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773068286, "uuid": "61158c0e-1bc8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-sync.nexulon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036965, "uuid": "74a90543-1b7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dist-sync.veloxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067385, "uuid": "4844ae5b-1bc6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyna-edge.dynastis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066728, "uuid": "c092aa59-1bc4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyna-v3.dynastis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773081309, "uuid": "b38b0020-1be6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "eaec4m.droplast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089955, "uuid": "d50d9663-1bfa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0fjv96k.demogsystemat.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773077285, "uuid": "550ea85d-1bdd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "faitdem.wayton.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773094565, "uuid": "90ba5c1e-1c05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-gate.synchromesh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072966, "uuid": "46978686-1bd3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-run.fluxoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072247, "uuid": "9a46efc9-1bd1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-v77.fluxoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773096607, "uuid": "5239f816-1c0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gala-net.galactoview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773095224, "uuid": "19d17972-1c07-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gala-v11.galactoview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773054548, "uuid": "64f210fc-1ba8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gaydkonx.fullgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773051424, "uuid": "1ea39f68-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "guardtrans.toolbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773078185, "uuid": "6d826dd2-1bdf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "guid-route.greentea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773053227, "uuid": "516a68a2-1ba5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyrfnqqh.fullgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773085390, "uuid": "34313678-1bf0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "infra-hub.altimetrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773086648, "uuid": "22171bb0-1bf3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "infra-net.altimetrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773062890, "uuid": "d150e61d-1bbb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iqdrq.slowbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773050527, "uuid": "07d1c8c6-1b9f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "jfjoj.askloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066012, "uuid": "15ba5291-1bc3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kron-flow.kronosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773065469, "uuid": "d233f7cc-1bc1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kron-v12.kronosis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773060130, "uuid": "63d3f4b6-1bb5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "letcurre.windright.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046810, "uuid": "6088a91f-1b96-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-gate.astronis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075124, "uuid": "4d396441-1bd8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-gate.spectris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773046265, "uuid": "1c0d0edf-1b95-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-logic.astronis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773074526, "uuid": "e8b2f2b1-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-logic.spectris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773097685, "uuid": "d47b11b9-1c0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-net.structovista.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773096907, "uuid": "04b4acc4-1c0b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-node.structovista.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773059350, "uuid": "92f4b99e-1bb3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lknz.windright.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087930, "uuid": "1e34eea4-1bf6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-core.primordialis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025505, "uuid": "c5d9a8b0-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumi-edge.lumitron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773024006, "uuid": "488e8ad2-1b61-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumi-v3.lumitron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043210, "uuid": "feb7ce68-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "magnusworkspace.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773070450, "uuid": "6af9a2d6-1bcd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-peak.orbisura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773040805, "uuid": "6515529f-1b88-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-peak.solarisx.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773091512, "uuid": "7524d604-1bfe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-sys.obsidianix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071166, "uuid": "15dc4711-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-sys.orbisura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773042245, "uuid": "bfaa9f0b-1b8b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-sys.solarisx.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773052565, "uuid": "c6f1b4b3-1ba3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mossoak.blackford.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048492, "uuid": "4b29984c-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mox-net.moxura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773047588, "uuid": "304ec15a-1b98-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mox-v11.moxura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773056285, "uuid": "705c772a-1bac-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-gu1de.rollbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773019925, "uuid": "c7bc1efe-1b57-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nex-base.nexoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773019266, "uuid": "3ed75def-1b56-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nex-v01.nexoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773068709, "uuid": "5d8fe586-1bc9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nexu-data.nexulon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067985, "uuid": "adc32cb2-1bc7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "nexu-v44.nexulon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045966, "uuid": "697947ac-1b94-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "niv-flow.niventa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045366, "uuid": "03d77493-1b93-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "niv-v08.niventa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043213, "uuid": "00a71c48-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-py-store.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773017826, "uuid": "e496e03d-1b52-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oak-net.oakbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773017165, "uuid": "5b15fc1c-1b51-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oak-v11.oakbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773092106, "uuid": "d755f1be-1bff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "obsi-base.obsidianix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773091152, "uuid": "9e521b82-1bfd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "obsi-v6.obsidianix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773066426, "uuid": "0cec82bb-1bc4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ops-gate.dynastis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023706, "uuid": "955a3978-1b60-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ops-gate.lumitron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773067206, "uuid": "dd626b3c-1bc5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ops-unit.dynastis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773025266, "uuid": "37218ef3-1b64-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ops-unit.lumitron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071465, "uuid": "c804ca31-1bcf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbi-base.orbisura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773070748, "uuid": "1cac60de-1bce-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbi-v6.orbisura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773052145, "uuid": "cc505861-1ba2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oute2-grid.blackford.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044769, "uuid": "9ff86d6a-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ovbfopy8.bitterfisherm.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773088927, "uuid": "706b82b8-1bf8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prim-data.primordialis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773063673, "uuid": "a3880ed5-1bbd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prim-node.veritax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064326, "uuid": "28eddd1d-1bbf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prim-sync.veritax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773088264, "uuid": "e5507aaa-1bf6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prim-v44.primordialis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773051126, "uuid": "6d693ac0-1ba0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "prrnftoa.toolbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043212, "uuid": "004049a4-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "py-installer.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071050, "uuid": "d10f1fee-1bce-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "qpgroup.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773087666, "uuid": "8076b68d-1bf5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quan-edge.quantovault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773053527, "uuid": "0405293f-1ba6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "queuemarsh.fullgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076805, "uuid": "36efba8a-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quin-net.quintura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076207, "uuid": "d25c5f38-1bda-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quin-v11.quintura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773057606, "uuid": "83a93834-1baf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorlithix3.spinpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773058930, "uuid": "988aef20-1bb2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "r3nder-switch.windright.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773016023, "uuid": "b23626a6-1b4e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-unit.redclay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773051727, "uuid": "d33abe18-1ba1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "reel-mount.toolbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773079685, "uuid": "eb90162b-1be2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "reel-tok.costfee.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773077589, "uuid": "0a2c8456-1bde-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "render5-line.wayton.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773058087, "uuid": "a254e358-1bb0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "repairdefend.spinpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773062470, "uuid": "d690ced5-1bba-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "s0lid-leaf.slowbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043212, "uuid": "001d8d15-1b8e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "s1-rarlab.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043210, "uuid": "feb59437-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "s3-python.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773068227, "uuid": "3e5cd5c9-1bc8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sfrc.ckmo.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773072665, "uuid": "93856f9d-1bd2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-net.fluxoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044412, "uuid": "cb7206de-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-net.terravia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773071829, "uuid": "a0fae419-1bd0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-node.fluxoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043748, "uuid": "3f955cf0-1b8f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-node.terravia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043028, "uuid": "923001ce-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-base.solarisx.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041647, "uuid": "5b412e4a-1b8a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-v6.solarisx.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082329, "uuid": "136f7eff-1be9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sp4rrow-phase.lookback.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090550, "uuid": "37b91203-1bfc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spec-node.spectrometric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075606, "uuid": "6c1768cb-1bd9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spec-unit.spectris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773090011, "uuid": "f63e6cc0-1bfa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spec-v05.spectrometric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773074825, "uuid": "9adbc80e-1bd7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spec-v09.spectris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773058511, "uuid": "9ee7edd9-1bb1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stri5-reach.spinpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773097984, "uuid": "86edf158-1c0d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stru-run.structovista.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773097387, "uuid": "22b665c4-1c0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stru-v77.structovista.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773094808, "uuid": "21644ac0-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-unit.synchromesh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773094325, "uuid": "01893032-1c05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-v09.synchromesh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773083825, "uuid": "8f491678-1bec-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "syncryp.bestink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773098285, "uuid": "39e27e96-1c0e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "syst-node.centurionix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773084548, "uuid": "3e272272-1bee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "syst-sync.centurionix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773096368, "uuid": "c3450982-1c09-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-base.galactoview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773047884, "uuid": "e0f46ab3-1b98-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-base.moxura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076385, "uuid": "3c9ad4eb-1bdb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-base.quintura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773094986, "uuid": "8bb583cc-1c06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-ref.galactoview.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773047350, "uuid": "a288c9bc-1b97-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-ref.moxura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773075846, "uuid": "fb256dd4-1bd9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tech-ref.quintura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045668, "uuid": "b7f63485-1b93-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-sync.niventa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773074046, "uuid": "cacafefe-1bd5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-sync.vibrante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773045066, "uuid": "50d95441-1b92-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-way.niventa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773073330, "uuid": "1f7acc1b-1bd4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-way.vibrante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773092590, "uuid": "f7958521-1c00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-way.vibratronic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044848, "uuid": "cf5f4bee-1b91-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "terr-run.terravia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773044285, "uuid": "7fc95f22-1b90-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "terr-v77.terravia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773048425, "uuid": "236d800f-1b9a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "transfer.weepee.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773076987, "uuid": "a3bc711e-1bdc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "transmfield.wayton.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773050106, "uuid": "0d5a41fa-1b9e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-fluxor.askloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773082747, "uuid": "0cb9db56-1bea-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "u1tr5-bridge.lookback.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773060005, "uuid": "19b6530b-1bb5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "unload-bridge.windright.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773043210, "uuid": "fe98bdad-1b8d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "updateservice1-telegramweb.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773056710, "uuid": "6dbc2fa8-1bad-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "valu-crest.spinpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773037265, "uuid": "272e3d7f-1b80-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-data.veloxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773035885, "uuid": "f1061be4-1b7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-v44.veloxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773055865, "uuid": "75a07990-1bab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "velline5en.rollbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064570, "uuid": "ba5a8380-1bbf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "veri-base.veritax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064085, "uuid": "990c9771-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "veri-v01.veritax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773074405, "uuid": "a086956f-1bd6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vibr-flow.vibrante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773093845, "uuid": "e3942ab4-1c03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vibr-flow.vibratronic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773073745, "uuid": "16ff8893-1bd5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vibr-v08.vibrante.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773019145, "uuid": "f6dab269-1b55-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vult-node.nexoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773019446, "uuid": "aa728dd0-1b56-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vult-sync.nexoris.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773089407, "uuid": "8e7db20f-1bf9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vult-vault.spectrometric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773062168, "uuid": "2282f96f-1bba-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmgrim.slowbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773041224, "uuid": "5f29c02b-1b89-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "web3-walletnotify.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773036728, "uuid": "e73f9178-1b7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.asdfgsdfgxcvbvcxasd-oss.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773064207, "uuid": "e1f11529-1bbe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "xf221.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773023344, "uuid": "bdcf63aa-1b5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-flow.zenithra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773021307, "uuid": "ffd66a3f-1b5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-v12.zenithra.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773070150, "uuid": "b890d5fd-1bcc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zent-node.zentalis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773069366, "uuid": "e4d8960c-1bca-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zent-v05.zentalis.in.net" } ] } }